CVE-2008-3773

Description

References

• marc.info · Patch
• secunia.com/advisories/31552 · Vendor Advisory
• securityreason.com/securityalert/4182
• coresecurity.com/content/vbulletin-cross-site-scripting-vulnerability · Patch
• securityfocus.com/bid/30777
• securitytracker.com/id
• vbulletin.com/forum/showthread.php · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/44576

Altre vulnerabilità di vbulletin

• CVE-2025-46171MEDIO 5.4vBulletin 3.8.7 is vulnerable to a denial-of-service condition via the misc.php?do=buddylist endpoint. If an authenticated user has a suffic…
• CVE-2025-48828ALTO 8.1Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By c…
• CVE-2025-48827CRITICO 9.8vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running…
• CVE-2023-39777MEDIO 5.4A cross-site scripting (XSS) vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web…
• CVE-2023-25135CRITICO 9.8vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers dese…