Unscored CVE-2006-0080 EUVD-2006-0088GHSA-jfmj-fwm8-7r43

Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web…

Published Jan 4, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the title of an event, which is not properly filtered by (1) calendar.php and (2) reminder.php.

References

22220 vdb-entry
20060108 Html_Injection in vBulletin 3.5.2 mailing-list
22210 vdb-entry
ADV-2006-0033 vdb-entry
20060101 [KAPDA::#19] - Html Injection in vBulletin 3.5.2 mailing-list
http://kapda.ir/advisory-177.html
18299 third-party-advisory
16116 vdb-entry