CVE

Id
33301  
CVE No.
CVE-2008-3184  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO (PHP_SELF) or (2) the do parameter, as demonstrated by requests to upload/admincp/faq.php. NOTE: this issue can be leveraged to execute arbitrary PHP code.  
Phase
Assigned (20080715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362513 33301 CVE-2008-3184 BUGTRAQ:20080708 XSS in admin logs - vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower  View
362514 33301 CVE-2008-3184 URL:http://www.securityfocus.com/archive/1/archive/1/494049/100/0/threaded  View
362515 33301 CVE-2008-3184 CONFIRM:http://www.vbulletin.com/forum/showthread.php?t=277945  View
362516 33301 CVE-2008-3184 BID:30134  View
362517 33301 CVE-2008-3184 URL:http://www.securityfocus.com/bid/30134  View
362518 33301 CVE-2008-3184 SECUNIA:30991  View
362519 33301 CVE-2008-3184 URL:http://secunia.com/advisories/30991  View
362520 33301 CVE-2008-3184 SREASON:4000  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49336 JVNDB-2008-004646 SUSE openSUSE の libxcrypt におけるハッシュされたパスワードに対して総当り攻撃を実行される脆弱性 SUSE openSUSE の libxcrypt は、MD5 アルゴリズムを使用する設定の際、DES アルゴリズムを使用するため、ハッシュされたパスワードに対して総当り攻撃を実行される脆弱性が存在します。 CVE-2008-3188 33301 6.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004646.html  View