CVE-2007-0830
published 2007-02-07CVE-2007-0830: Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators…
PriorityP411low3.5CVSS 2.0
AVNACMAuSCNIPAN
EPSS
0.87%
54.2th percentile
Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors related to the (1) User Group Manager, (2) User Rank Manager, (3) User Title Manager, (4) BB Code Manager, (5) Attachment Manager, (6) Calendar Manager, and (7) Forums & Moderators functions. NOTE: the vendor disputes this issue, stating that modifying HTML is an intended privilege of an administrator. NOTE: it is possible that this issue overlaps CVE-2006-6040
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jelsoft | vbulletin | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jjfq-rv7x-xc35: Cross-site scripting (XSS) vulnerability in the Attachment Manager (admincp/attachment
ghsa_unreviewed·2022-05-01·CVSS 3.5
CVE-2007-0869 [LOW] GHSA-jjfq-rv7x-xc35: Cross-site scripting (XSS) vulnerability in the Attachment Manager (admincp/attachment
Cross-site scripting (XSS) vulnerability in the Attachment Manager (admincp/attachment.php) in Jelsoft vBulletin 3.6.4 allows remote attackers to inject arbitrary web script or HTML via the Extension field. NOTE: this might be a duplicate of CVE-2007-0830.5. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
GHSA
GHSA-ppmj-f697-j88m: ** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3
ghsa_unreviewed·2022-05-01·CVSS 6.8
CVE-2007-0830 [MEDIUM] CWE-79 GHSA-ppmj-f697-j88m: ** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3
** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors related to the (1) User Group Manager, (2) User Rank Manager, (3) User Title Manager, (4) BB Code Manager, (5) Attachment Manager, (6) Calendar Manager, and (7) Forums & Moderators functions. NOTE: the vendor disputes this issue, stating that modifying HTML is an intended privilege of an administrator. NOTE: it is possible that this issue overlaps CVE-2006-6040.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/35152http://secunia.com/advisories/24085http://www.securityfocus.com/archive/1/459289/100/0/threadedhttp://www.securityfocus.com/archive/1/459367/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/32268http://osvdb.org/35152http://secunia.com/advisories/24085http://www.securityfocus.com/archive/1/459289/100/0/threadedhttp://www.securityfocus.com/archive/1/459367/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/32268
2007-02-07
Published