CVE-2004-1823

MEDIUM 4.3CVE-2004-1823 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-1823 is a MEDIUM (CVSS 4.3) vulnerability affecting vbulletin (jelsoft).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
vbulletin jelsoft	`= 3.0.0= 3.0.0_can4`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php.

References

marc.info
secunia.com/advisories/11142 · Patch
securitytracker.com/id
osvdb.org/4310
osvdb.org/4311
securityfocus.com/bid/9888 · Exploit
securityfocus.com/bid/9889 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/15495

More vulnerabilities in vbulletin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

vbulletin

jelsoft

= 3.0.0= 3.0.0_can4

No fix yet

More vulnerabilities in vbulletin

See all →