Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via the u parameter. NOTE: the vendor has disputed this report, stating that they have been unable to replicate the issue and that "the userid parameter is run through our filtering system as an unsigned integer.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Vbulletin Member.PHP 跨站脚本漏洞
Vulnerability Description
** 有争议 ** vBulletin 3.5.x的member.php中的跨站脚本攻击(XSS)漏洞，可让远程攻击者通过u参数注入任意Web脚本或HTML。注意：供应商对此报告有争议，声称他们无法重现问题，并且"userid参数是通过我们的过滤系统作为没有符号的整数运行的"。
CVSS Information
N/A
Vulnerability Type
N/A