NVD

Id
53047  
Name
CVE-2007-0830  
Description
** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors related to the (1) User Group Manager, (2) User Rank Manager, (3) User Title Manager, (4) BB Code Manager, (5) Attachment Manager, (6) Calendar Manager, and (7) Forums & Moderators functions. NOTE: the vendor disputes this issue, stating that modifying HTML is an intended privilege of an administrator. NOTE: it is possible that this issue overlaps CVE-2006-6040.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-02-07  
Modified Date
2008-11-15  
Seq
2007-0830  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
268287 53047 CVE-2007-0830 20070206 VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability  View
268288 53047 CVE-2007-0830 20070207 Re: VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability  View
268289 53047 CVE-2007-0830 vbulletin-admincp-index-xss(32268)  View

Related JVN