Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to language.php, (5) orderby parameter to modlog.php, and the (6) hex, (7) rgb, or (8) expandset parameter to template.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Vbulletin多个跨站脚本漏洞
Vulnerability Description
Vbulletion是一个功能强大、可扩展和可完全定制的 Web 站点论坛，由PHP 编写，是大中站点社区建构理想的解决方案。 vBulletin 3.0.9之前的版本存在多个跨站脚本(XSS)漏洞，远程攻击者可以通过(1)group参数向css.php文件(2)redirect参数向index.php，(3)email参数向user.php文件(4)goto参数向language.php文件(5)orderby参数向modlog.php文件，以及(6)hex，(7)rgb，或(8)expandset参数
CVSS Information
N/A
Vulnerability Type
N/A