Jelsoft vulnerabilities

Products

• Vbulletin 51
• Vbsupport Integrated Ticket System 2

Newest

• jelsoft oscmax Cross-site scripting (XSS) vulnerability in catalog_products_with_images.php in osCMax 2.0.0-RC3... CVE-2007-4959 4.3 MediumSeptember 18, 2007
• jelsoft vbulletin ** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.8 allow... CVE-2007-4453 Disputed 4.3 MediumAugust 21, 2007
• jelsoft vbulletin ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5... CVE-2007-4120 Disputed 9.3 HighAugust 1, 2007
• jelsoft vbulletin Multiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to... CVE-2007-3326 5.8 MediumJune 21, 2007
• jelsoft vbsupport integrated ticket system SQL injection vulnerability in vBSupport.php in vBSupport 1.1 before 1.1a allows remote attackers... CVE-2007-3197 7.5 HighJune 12, 2007
• jelsoft vbsupport integrated ticket system SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows... CVE-2007-3196 Public exploit 7.5 HighJune 12, 2007
• jelsoft vbulletin Unspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction... CVE-2007-2912 5.0 MediumMay 30, 2007
• jelsoft vbulletin SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows... CVE-2007-2911 8.5 HighMay 30, 2007
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote... CVE-2007-2910 4.3 MediumMay 30, 2007
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7... CVE-2007-2909 3.5 LowMay 30, 2007
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows... CVE-2007-2908 Public exploit 4.3 MediumMay 30, 2007
• jelsoft vbulletin SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin 3.6.5 allows remote... CVE-2007-1573 6.0 MediumMarch 21, 2007
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in admincp/index.php in Jelsoft vBulletin 3.6.5 and... CVE-2007-1342 4.3 MediumMarch 8, 2007
• jelsoft vbulletin SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5... CVE-2007-1292 Public exploit 7.5 HighMarch 7, 2007
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in the Attachment Manager (admincp/attachment.php) in... CVE-2007-0869 4.3 MediumFebruary 9, 2007
• jelsoft vbulletin ** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel ... CVE-2007-0830 Disputed 3.5 LowFebruary 7, 2007
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject... CVE-2006-6779 Public exploit 6.8 MediumDecember 28, 2006
• jelsoft vbulletin Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6... CVE-2006-6040 Public exploit 6.8 MediumNovember 22, 2006
• jelsoft vbulletin SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to... CVE-2006-5104 Public exploit 7.5 HighOctober 2, 2006
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote... CVE-2006-4273 Public exploit 6.8 MediumAugust 21, 2006
• jelsoft vbulletin ** DISPUTED ** Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary... CVE-2006-4272 Disputed 7.5 HighAugust 21, 2006
• jelsoft vbulletin ** DISPUTED ** PHP remote file inclusion vulnerability in install/upgrade_301.php in Jelsoft... CVE-2006-4271 Disputed 7.5 HighAugust 21, 2006
• jelsoft vbulletin ** DISPUTED ** Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows... CVE-2006-3253 Public exploitDisputed 2.6 LowJune 27, 2006
• jelsoft vbulletin SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL... CVE-2006-2805 Public exploit 5.0 MediumJune 3, 2006
• jelsoft vbulletin Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way... CVE-2006-2335 6.5 MediumMay 12, 2006
• jelsoft vbulletin SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute... CVE-2006-2018 7.5 HighApril 25, 2006
• jelsoft vbulletin PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote... CVE-2006-1816 5.0 MediumApril 18, 2006
• jelsoft vbug tracker Cross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and... CVE-2006-1673 Public exploit 2.6 LowApril 7, 2006
• jelsoft impex PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74,... CVE-2006-1382 7.5 HighMarch 24, 2006
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to... CVE-2006-1040 Public exploit 4.3 MediumMarch 7, 2006
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions,... CVE-2006-0080 4.3 MediumJanuary 4, 2006
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote... CVE-2005-4621 4.3 MediumDecember 31, 2005
• jelsoft vbulletin Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 and earlier allow remote... CVE-2005-3025 4.3 MediumSeptember 21, 2005
• jelsoft vbulletin Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to... CVE-2005-3024 7.5 HighSeptember 21, 2005
• jelsoft vbulletin Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote... CVE-2005-3023 4.3 MediumSeptember 21, 2005
• jelsoft vbulletin Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to... CVE-2005-3022 7.5 HighSeptember 21, 2005
• jelsoft vbulletin image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator... CVE-2005-3021 2.1 LowSeptember 21, 2005
• jelsoft vbulletin Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote... CVE-2005-3020 Public exploit 4.3 MediumSeptember 21, 2005
• jelsoft vbulletin Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to... CVE-2005-3019 Public exploit 7.5 HighSeptember 21, 2005
• jelsoft vbulletin misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled,... CVE-2005-0511 Public exploit EPSS 35.8% 7.5 HighFebruary 21, 2005
• jelsoft vbulletin Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when... CVE-2005-0429 Public exploit 5.0 MediumFebruary 15, 2005
• jelsoft vbulletin, point-to-point protocol project protocol +1 more SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in... CVE-2004-2695 7.5 HighDecember 31, 2004
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote... CVE-2004-2288 Public exploit 4.3 MediumDecember 31, 2004
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows... CVE-2004-2076 Public exploit 4.3 MediumDecember 31, 2004
• jelsoft vbulletin Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0... CVE-2004-1823 Public exploit 4.3 MediumDecember 31, 2004
• jelsoft vbulletin SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote... CVE-2004-1515 Public exploit 7.5 HighDecember 31, 2004
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3... CVE-2004-0620 Public exploit 4.3 MediumJune 30, 2004
• jelsoft vbulletin ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS)... CVE-2004-0091 Disputed 4.3 MediumJanuary 22, 2004
• jelsoft vbulletin SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote... CVE-2004-0036 5.0 MediumJanuary 20, 2004
• jelsoft vbulletin Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote... CVE-2003-0295 Public exploit 6.8 MediumMay 15, 2003
• Show olderLoading…