CVE

Id
24187  
CVE No.
CVE-2007-0830  
Status
Candidate  
Description
** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors related to the (1) User Group Manager, (2) User Rank Manager, (3) User Title Manager, (4) BB Code Manager, (5) Attachment Manager, (6) Calendar Manager, and (7) Forums & Moderators functions. NOTE: the vendor disputes this issue, stating that modifying HTML is an intended privilege of an administrator. NOTE: it is possible that this issue overlaps CVE-2006-6040.  
Phase
Assigned (20070207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
236809 24187 CVE-2007-0830 BUGTRAQ:20070206 VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability  View
236810 24187 CVE-2007-0830 URL:http://www.securityfocus.com/archive/1/archive/1/459289/100/0/threaded  View
236811 24187 CVE-2007-0830 BUGTRAQ:20070207 Re: VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability  View
236812 24187 CVE-2007-0830 URL:http://www.securityfocus.com/archive/1/archive/1/459367/100/0/threaded  View
236813 24187 CVE-2007-0830 OSVDB:35152  View
236814 24187 CVE-2007-0830 URL:http://osvdb.org/35152  View
236815 24187 CVE-2007-0830 SECUNIA:24085  View
236816 24187 CVE-2007-0830 URL:http://secunia.com/advisories/24085  View
236817 24187 CVE-2007-0830 XF:vbulletin-admincp-index-xss(32268)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56384 JVNDB-2007-005076 VMware Workstation における重要な情報を取得される脆弱性 VMware Workstation は、"仮想マシンとのコピーおよびペーストを可能にする" チェックボックスが変更された際、共有クリップボードの利用を直ぐに変更しないため、重要な情報を取得される、またはホストとゲストの OS が十分に隔離されていないことで可能となる特定の攻撃を実行される脆弱性が存在します。 CVE-2007-0832 24187 1.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005076.html  View