Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

jelsoft vbulletin 2.0 beta 2 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2005-0511

misc.php for vBulletin 3.0.6 and previous versions, when "Add Template Name in HTML Comments" is enabled, allows remote malicious users to execute arbitrary PHP code via nested variables in the template parameter.
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0.0 Rc4Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 2.2.9 CanJelsoft Vbulletin 3.0.0 Beta 2Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.0.2Jelsoft Vbulletin 2.0Jelsoft Vbulletin 2.0.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 3.0.0 Can4Jelsoft Vbulletin 2.0 Beta 2Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.0 Beta 3Jelsoft Vbulletin 3.0.0Jelsoft Vbulletin 2.2.6
NA

CVE-2004-2288

Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote malicious users to spoof parts of a website via the loc parameter.
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 2.0 Rc2Jelsoft Vbulletin 3.0 Beta 6Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 2.3.2Jelsoft Vbulletin 2.0 Rc3Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 2.0.3Jelsoft Vbulletin 3.0 Beta 7Jelsoft Vbulletin 3.0 Beta 3Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.2.6Jelsoft Vbulletin 3.0 GammaJelsoft Vbulletin 2.2.9Jelsoft Vbulletin 3.0 Beta 4Jelsoft Vbulletin 1.0.1Jelsoft Vbulletin 2.2.8Jelsoft Vbulletin 2.3.4
NA

CVE-2005-3019

Multiple SQL injection vulnerabilities in vBulletin prior to 3.0.9 allow remote malicious users to execute arbitrary SQL commands via the (1) request parameter to joinrequests.php, (2) limitnumber or (3) limitstart to user.php, (4) usertitle.php, or (5) usertools.php.
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 2.0 Rc2Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0 Beta 6Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 2.3.2Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 2.0 Rc3Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 2.0.3Jelsoft Vbulletin 3.0 Beta 7Jelsoft Vbulletin 3.0 Beta 3Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.2.6Jelsoft Vbulletin 3.0.2Jelsoft Vbulletin 3.0 GammaJelsoft Vbulletin 2.2.9
NA

CVE-2005-3024

Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) announcement parameter to announcement.php, the (2) thread[forumid] or (3) criteria parameters to thread.php, (4) userid para...
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 2.0 Rc2Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0 Beta 6Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 2.3.2Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 2.0 Rc3Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 2.0.3Jelsoft Vbulletin 3.0 Beta 7Jelsoft Vbulletin 3.0 Beta 3Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.2.6Jelsoft Vbulletin 3.0.2Jelsoft Vbulletin 3.0 GammaJelsoft Vbulletin 2.2.9
NA

CVE-2005-3025

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the loc parameter to (1) modcp/index.php or (2) admincp/index.php, or the ip parameter to (3) modcp/user.php or (4)...
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 2.0 Rc2Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0 Beta 6Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 2.3.2Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 2.0 Rc3Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 2.0.3Jelsoft Vbulletin 3.0 Beta 7Jelsoft Vbulletin 3.0 Beta 3Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.2.6Jelsoft Vbulletin 3.0.2Jelsoft Vbulletin 3.0 GammaJelsoft Vbulletin 2.2.9
NA

CVE-2005-3020

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin prior to 3.0.9 allow remote malicious users to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to ...
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 2.0 Rc2Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0 Beta 6Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 2.3.2Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 2.0 Rc3Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 2.0.3Jelsoft Vbulletin 3.0 Beta 7Jelsoft Vbulletin 3.0.9Jelsoft Vbulletin 3.0 Beta 3Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.2.6Jelsoft Vbulletin 3.0.2Jelsoft Vbulletin 3.0 Gamma
NA

CVE-2005-3021

image.php in vBulletin 3.0.9 and previous versions allows remote attackers with access to the administrator panel to upload arbitrary files via the upload action.
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 2.0 Rc2Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0 Beta 6Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 2.3.2Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 2.0 Rc3Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 2.0.3Jelsoft Vbulletin 3.0 Beta 7Jelsoft Vbulletin 3.0.9Jelsoft Vbulletin 3.0 Beta 3Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.2.6Jelsoft Vbulletin 3.0.2Jelsoft Vbulletin 3.0 Gamma
NA

CVE-2005-3022

Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) announcement parameter to announcement.php, (2) userid parameter to user.php, (3) calendar parameter to admincalendar.php, (4...
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 2.0 Rc2Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0 Beta 6Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 2.3.2Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 2.0 Rc3Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 2.0.3Jelsoft Vbulletin 3.0 Beta 7Jelsoft Vbulletin 3.0.9Jelsoft Vbulletin 3.0 Beta 3Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.2.6Jelsoft Vbulletin 3.0.2Jelsoft Vbulletin 3.0 Gamma
NA

CVE-2005-3023

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and previous versions allow remote malicious users to inject arbitrary web script or HTML via certain arguments to (1) announcement.php, (2) admincalendar.php, (3) bbcode.php, (4) cronadmin.php, (5) email.php,...
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 2.0 Rc2Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0 Beta 6Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 2.3.2Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 2.0 Rc3Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 2.0.3Jelsoft Vbulletin 3.0 Beta 7Jelsoft Vbulletin 3.0.9Jelsoft Vbulletin 3.0 Beta 3Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.2.6Jelsoft Vbulletin 3.0.2Jelsoft Vbulletin 3.0 Gamma
NA

CVE-2005-4621

Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote malicious users to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extensio...
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 2.0 Rc2Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0 Beta 6Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 2.3.8Jelsoft Vbulletin 2.3.2Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 3.5.1Jelsoft Vbulletin 2.0 Rc3Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 2.0.3Jelsoft Vbulletin 3.0 Beta 7Jelsoft Vbulletin 3.0.9Jelsoft Vbulletin 3.0 Beta 3Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.2.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5834CVE-2024-30100CVE-2024-4577physicaldosCVE-2024-30099CVE-2024-27801CVE-2024-32146logic flaw
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook