CVE

Id
17144  
CVE No.
CVE-2006-1040  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php.  
Phase
Assigned (20060307)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
140414 17144 CVE-2006-1040 BUGTRAQ:20060301 [KAPDA::#26]vBulletin.3.5.3~3.0.12-XSS  View
140415 17144 CVE-2006-1040 URL:http://www.securityfocus.com/archive/1/archive/1/426537/100/0/threaded  View
140416 17144 CVE-2006-1040 BUGTRAQ:20060302 vBulletin3.0.12&3.5.3~is_valid_email()~XSS Attack  View
140417 17144 CVE-2006-1040 URL:http://www.securityfocus.com/archive/1/archive/1/426589/100/0/threaded  View
140418 17144 CVE-2006-1040 MISC:http://www.kapda.ir/advisory-266.html  View
140419 17144 CVE-2006-1040 CONFIRM:http://www.vbulletin.com/forum/showthread.php?postid=1079030  View
140420 17144 CVE-2006-1040 BID:16919  View
140421 17144 CVE-2006-1040 URL:http://www.securityfocus.com/bid/16919  View
140422 17144 CVE-2006-1040 VUPEN:ADV-2006-0808  View
140423 17144 CVE-2006-1040 URL:http://www.vupen.com/english/advisories/2006/0808  View
140424 17144 CVE-2006-1040 OSVDB:23614  View
140425 17144 CVE-2006-1040 URL:http://www.osvdb.org/23614  View
140426 17144 CVE-2006-1040 SECUNIA:19100  View

Related JVN