CVE-2005-3020

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/template.php' Multiple Cross-Site Scripting Vulnerabilities2005-09-19 · webapps · php · Verified
• vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/modlog.php?orderby' Cross-Site Scripting2005-09-19 · webapps · php · Verified
• vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/language.php?goto' Cross-Site Scripting2005-09-19 · webapps · php · Verified
• vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/user.php?email' Cross-Site Scripting2005-09-19 · webapps · php · Verified
• vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/index.php' Multiple Cross-Site Scripting Vulnerabilities2005-09-19 · webapps · php · Verified
• vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/css.php?group' Cross-Site Scripting2005-09-19 · webapps · php · Verified

Impact

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to language.php, (5) orderby parameter to modlog.php, and the (6) hex, (7) rgb, or (8) expandset parameter to template.php.

Affected products

References

• NVD record
• CVE.org record
• http://marc.info/?l=bugtraq&m=112715150320677&w=2
• http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt
• http://secunia.com/advisories/16873/
• http://www.securityfocus.com/bid/14874
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22324
• http://marc.info/?l=bugtraq&m=112715150320677&w=2
• http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt
• http://secunia.com/advisories/16873/
• http://www.securityfocus.com/bid/14874
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22324