CVE-2007-3326 — Cross-site Scripting in Vbulletin

3 documents3 sources
Severity
5.8MEDIUMNVD
EPSS
0.7%
top 26.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Jelsoft Vbulletin
Timeline
PublishedJun 21
Latest updateMay 1

Description

Multiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to redirect visitors to arbitrary local files via a .. (dot dot) in (1) the loc parameter to admincp/index.php and (2) the Hyperlink information URl field for post Topic in showthread.php, enabling cross-site scripting (XSS) and other attacks, a different vulnerability than CVE-2005-3025.2.

CVSS vector

AV:N/AC:M/C:N/I:P/A:PExploitability: 8.6 | Impact: 4.9

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-8p3g-fvg6-vqh6: Multiple directory traversal vulnerabilities in vBulletin 3↗2022-05-01
▶

💥Exploits & PoCs

1
Exploit-DB
Vivvo CMS 3.4 - Multiple Vulnerabilities↗2008-10-19
▶