Unscored CVE-2007-1342 EUVD-2007-1339GHSA-ffrv-73m3-h4wf

Cross-site scripting (XSS) vulnerability in admincp/index.php in Jelsoft vBulletin 3.6.5 and earlier allows remote attackers to inject arbi…

Published Mar 8, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in admincp/index.php in Jelsoft vBulletin 3.6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the add rss url form.

References

20070302 vBulletin v3.6.5 admincp/index.php ( rss feed ) xss vuln. mailing-list
22790 vdb-entry
2396 third-party-advisory
vbulletin-admincpindex-xss(32780) vdb-entry