CVE-2012-3844

Description

References

• hauntit.blogspot.com/2012/04/en-vbulletin-4112-cross-site-scripting.html
• packetstormsecurity.org/files/112385/vBulletin-4.1.12-Cross-Site-Scripting.html
• securityfocus.com/bid/53319
• exchange.xforce.ibmcloud.com/vulnerabilities/75325

Weitere Schwachstellen in vbulletin

• CVE-2025-46171MITTEL 5.4vBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoint. If an authenticated user has a suffic…
• CVE-2025-48828HOCH 8.1Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By c…
• CVE-2025-48827KRITISCH 9.8vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running…
• CVE-2023-39777MITTEL 5.4A cross-site scripting (XSS) vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web…
• CVE-2023-25135KRITISCH 9.8vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers dese…