Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors related to the (1) User Group Manager, (2) User Rank Manager, (3) User Title Manager, (4) BB Code Manager, (5) Attachment Manager, (6) Calendar Manager, and (7) Forums & Moderators functions. NOTE: the vendor disputes this issue, stating that modifying HTML is an intended privilege of an administrator. NOTE: it is possible that this issue overlaps CVE-2006-6040
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jelsoft vBulletin 跨站脚本漏洞
Vulnerability Description
Jelsoft vBulletin 3.6.4 管理控制面板 (AdminCP) 中存在跨站脚本漏洞，允许远程身份验证管理员通过与 (1) 用户组相关的未指定向量注入任意 Web 脚本或 HTML管理器，(2) 用户等级管理器，(3) 用户标题管理器，(4) BB 代码管理器，(5) 附件管理器，(6) 日历管理器，以及 (7) 论坛和版主功能。
CVSS Information
N/A
Vulnerability Type
N/A