Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VBulletin存在跨站脚本执行漏洞
Vulnerability Description
vBulletin是一款商业性质论坛程序，运行在多种Unix和Linux系统平台下，也可运行于Windows平台下，由PHP+MySQL实现。 vBulletin对URL参数过滤上存在漏洞，可导致产生跨站脚本执行漏洞。 vBulletin中memberlist.php脚本的$letterbits参数对用户提供的内容没有做充分过滤，这可能导致攻击者建立包含恶意代码的链接，当其他用户浏览相关此连接的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于COOKIE的认证信息。
CVSS Information
N/A
Vulnerability Type
N/A