Skip to contentJelsoft Vbulletin vulnerabilities
- jelsoft vbulletin** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.8 allow...CVE-2007-4453Disputed4.3 Medium
- jelsoft vbulletin** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5...CVE-2007-4120Disputed9.3 High
- jelsoft vbulletinMultiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to...CVE-2007-33265.8 Medium
- jelsoft vbulletinUnspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction...CVE-2007-29125.0 Medium
- jelsoft vbulletinSQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows...CVE-2007-29118.5 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote...CVE-2007-29104.3 Medium
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7...CVE-2007-29093.5 Low
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows...CVE-2007-2908Public exploit4.3 Medium
- jelsoft vbulletinSQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin 3.6.5 allows remote...CVE-2007-15736.0 Medium
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in admincp/index.php in Jelsoft vBulletin 3.6.5 and...CVE-2007-13424.3 Medium
- jelsoft vbulletinSQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5...CVE-2007-1292Public exploit7.5 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in the Attachment Manager (admincp/attachment.php) in...CVE-2007-08694.3 Medium
- jelsoft vbulletin** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel ...CVE-2007-0830Disputed3.5 Low
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject...CVE-2006-6779Public exploit6.8 Medium
- jelsoft vbulletinMultiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6...CVE-2006-6040Public exploit6.8 Medium
- jelsoft vbulletinSQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to...CVE-2006-5104Public exploit7.5 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote...CVE-2006-4273Public exploit6.8 Medium
- jelsoft vbulletin** DISPUTED ** Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary...CVE-2006-4272Disputed7.5 High
- jelsoft vbulletin** DISPUTED ** PHP remote file inclusion vulnerability in install/upgrade_301.php in Jelsoft...CVE-2006-4271Disputed7.5 High
- jelsoft vbulletin** DISPUTED ** Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows...CVE-2006-3253Public exploitDisputed2.6 Low
- jelsoft vbulletinSQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL...CVE-2006-2805Public exploit5.0 Medium
- jelsoft vbulletinJelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way...CVE-2006-23356.5 Medium
- jelsoft vbulletinSQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute...CVE-2006-20187.5 High
- jelsoft vbulletinPHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote...CVE-2006-18165.0 Medium
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to...CVE-2006-1040Public exploit4.3 Medium
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions,...CVE-2006-00804.3 Medium
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote...CVE-2005-46214.3 Medium
- jelsoft vbulletinMultiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 and earlier allow remote...CVE-2005-30254.3 Medium
- jelsoft vbulletinMultiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to...CVE-2005-30247.5 High
- jelsoft vbulletinMultiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote...CVE-2005-30234.3 Medium
- jelsoft vbulletinMultiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to...CVE-2005-30227.5 High
- jelsoft vbulletinimage.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator...CVE-2005-30212.1 Low
- jelsoft vbulletinMultiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote...CVE-2005-3020Public exploit4.3 Medium
- jelsoft vbulletinMultiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to...CVE-2005-3019Public exploit7.5 High
- jelsoft vbulletinmisc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled,...CVE-2005-0511Public exploitEPSS 35.8%7.5 High
- jelsoft vbulletinDirect code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when...CVE-2005-0429Public exploit5.0 Medium
- jelsoft vbulletin, point-to-point protocol project protocol +1 moreSQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in...CVE-2004-26957.5 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote...CVE-2004-2288Public exploit4.3 Medium
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows...CVE-2004-2076Public exploit4.3 Medium
- jelsoft vbulletinMultiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0...CVE-2004-1823Public exploit4.3 Medium
- jelsoft vbulletinSQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote...CVE-2004-1515Public exploit7.5 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3...CVE-2004-0620Public exploit4.3 Medium
- jelsoft vbulletin** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS)...CVE-2004-0091Disputed4.3 Medium
- jelsoft vbulletinSQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote...CVE-2004-00365.0 Medium
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote...CVE-2003-0295Public exploit6.8 Medium
- jelsoft vbulletinmember2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be...CVE-2002-2235Public exploit5.0 Medium
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8...CVE-2002-1922Public exploit4.3 Medium
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to...CVE-2002-16794.3 Medium
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through...CVE-2002-16784.3 Medium
- jelsoft vbulletincalendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via...CVE-2002-1660Public exploitEPSS 11.1%7.5 High
- Show olderLoading…