CVE-2007-0830 — Cross-site Scripting in Vbulletin

CWE-79 — Cross-site Scripting4 documents2 sources
Severity
4.3MEDIUMNVD
NVD3.5
EPSS
0.3%
top 46.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Jelsoft Vbulletin
Timeline
PublishedFeb 7
Latest updateMay 1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors related to the (1) User Group Manager, (2) User Rank Manager, (3) User Title Manager, (4) BB Code Manager, (5) Attachment Manager, (6) Calendar Manager, and (7) Forums & Moderators functions. NOTE: the vendor disputes this issue, stating that modifying HTML is an intended privil…

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-jjfq-rv7x-xc35: Cross-site scripting (XSS) vulnerability in the Attachment Manager (admincp/attachment↗2022-05-01
▶
GHSA
GHSA-ppmj-f697-j88m: ** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3↗2022-05-01
▶