VBulletin Profile.PHP Cross-Site Scripting Vulnerability
BID:16128
Info
VBulletin Profile.PHP Cross-Site Scripting Vulnerability
| Bugtraq ID: | 16128 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 26 2005 12:00AM |
| Updated: | Jun 21 2006 03:25PM |
| Credit: | rakstija r0t3d3Vil is credited with the discovery of this vulnerability. |
| Vulnerable: |
VBulletin VBulletin 3.5.1 VBulletin VBulletin 3.0.10 VBulletin VBulletin 3.0.9 VBulletin VBulletin 3.0.8 VBulletin VBulletin 3.0.7 VBulletin VBulletin 3.0.6 VBulletin VBulletin 3.0.5 VBulletin VBulletin 3.0.4 VBulletin VBulletin 3.0.3 VBulletin VBulletin 3.0.2 VBulletin VBulletin 3.0.1 VBulletin VBulletin 3.0 Gamma VBulletin VBulletin 3.0 beta 7 VBulletin VBulletin 3.0 beta 6 VBulletin VBulletin 3.0 beta 5 VBulletin VBulletin 3.0 beta 4 VBulletin VBulletin 3.0 beta 3 VBulletin VBulletin 3.0 beta 2 VBulletin VBulletin 3.0 VBulletin VBulletin 2.3.8 VBulletin VBulletin 2.3.4 VBulletin VBulletin 2.3.3 VBulletin VBulletin 2.3.2 VBulletin VBulletin 2.3 .0 VBulletin VBulletin 2.2.9 VBulletin VBulletin 2.2.8 VBulletin VBulletin 2.2.7 VBulletin VBulletin 2.2.6 VBulletin VBulletin 2.2.5 VBulletin VBulletin 2.2.4 VBulletin VBulletin 2.2.3 VBulletin VBulletin 2.2.2 VBulletin VBulletin 2.2.1 VBulletin VBulletin 2.2 .0 VBulletin VBulletin 2.0.3 VBulletin VBulletin 2.0 rc 3 VBulletin VBulletin 2.0 rc 2 VBulletin VBulletin 1.0.1 lite |
| Not Vulnerable: |
VBulletin VBulletin 3.5.2 VBulletin VBulletin 3.0.11 |
Discussion
VBulletin Profile.PHP Cross-Site Scripting Vulnerability
VBulletin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
VBulletin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
VBulletin Profile.PHP Cross-Site Scripting Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
VBulletin Profile.PHP Cross-Site Scripting Vulnerability
Solution:
The vendor has released updates to address this issue.
Solution:
The vendor has released updates to address this issue.
References
VBulletin Profile.PHP Cross-Site Scripting Vulnerability
References:
References:
- VBulletin 3.5.1 XSS vuln. (rakstija r0t3d3Vil)
- Vendor Homepage (Kyberna)