fkie_cve-2004-1824
Vulnerability from fkie_nvd
Published
2004-12-31 05:00
Modified
2025-04-03 01:03
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php.
References
cve@mitre.orghttp://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html
cve@mitre.orghttp://marc.info/?l=bugtraq&m=107945556112453&w=2
cve@mitre.orghttp://secunia.com/advisories/11142Patch
cve@mitre.orghttp://securitytracker.com/id?1009440
cve@mitre.orghttp://www.iss.net/security_center/static/10679.php
cve@mitre.orghttp://www.osvdb.org/4312
cve@mitre.orghttp://www.securityfocus.com/bid/6226
cve@mitre.orghttp://www.securityfocus.com/bid/9887Exploit
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/15495
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=107945556112453&w=2
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/11142Patch
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1009440
af854a3a-2127-422b-91ae-364da2661108http://www.iss.net/security_center/static/10679.php
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/4312
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/6226
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/9887Exploit
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/15495
Impacted products
Vendor Product Version
jelsoft vbulletin 2.0
jelsoft vbulletin 2.0.1
jelsoft vbulletin 2.0.2
jelsoft vbulletin 2.0_beta_2
jelsoft vbulletin 2.0_beta_3
jelsoft vbulletin 2.2.0
jelsoft vbulletin 2.2.1
jelsoft vbulletin 2.2.2
jelsoft vbulletin 2.2.3
jelsoft vbulletin 2.2.4
jelsoft vbulletin 2.2.5
jelsoft vbulletin 2.2.6
jelsoft vbulletin 2.2.7
jelsoft vbulletin 2.2.8
jelsoft vbulletin 2.2.9_can
jelsoft vbulletin 2.3.0
jelsoft vbulletin 2.3.3
jelsoft vbulletin 2.3.4


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A81E1505-5F99-4DA8-AC0F-28F3E6F819C6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "818806B0-37B1-4CC2-A955-E711EC000203",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0394B9E0-FD26-4D5E-91D5-B8334B517DD3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.0_beta_2:*:*:*:*:*:*:*",
              "matchCriteriaId": "08DCDE86-03BD-4A61-9F3A-5EB05912A2D6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.0_beta_3:*:*:*:*:*:*:*",
              "matchCriteriaId": "CCC9227A-1F12-4E93-AEA7-C44D6A6F4177",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "306C6BDF-C687-4B63-998B-B520DF1D1B1B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF18ED7C-80BB-4A78-8809-9AAE817876A4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D731A35-E0DB-4F40-A981-C38229A2EB1E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "4053C8E5-5510-4814-A46E-89B81266C29D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E6753AB-DFCF-4D40-8267-645810F7967E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B2B3772-A566-4A51-8B51-68E78C86CB08",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "DAFBBAA9-BD46-44E3-9618-D87384E959A2",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.2.9_can:*:*:*:*:*:*:*",
              "matchCriteriaId": "747A57AD-A345-4F5B-AD82-0F7E08C2240E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "04E0702A-9235-45BE-82A8-BFD57A0DCC9E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD0914B4-24A9-438F-9B44-A6809D755168",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php."
    }
  ],
  "id": "CVE-2004-1824",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2004-12-31T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=107945556112453\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://secunia.com/advisories/11142"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1009440"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.iss.net/security_center/static/10679.php"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/4312"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/6226"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/9887"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15495"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=107945556112453\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://secunia.com/advisories/11142"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1009440"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.iss.net/security_center/static/10679.php"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/4312"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/6226"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/9887"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15495"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.