Beveiligingsadvies

CVE-2004-0091

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2004-01-22 05:00:00

Laatst bijgewerkt 2024-08-08 00:10:02

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the reg_site (or possibly regsite) parameter. NOTE: the vendor has disputed this issue, saying "There is no hidden field called 'reg_site', nor any $reg_site variable anywhere in the vBulletin 2 or vBulletin 3 source code or templates, nor has it ever existed. We can only assume that this vulnerability was found in a site running code modified from that supplied by Jelsoft.

← Alle CVE's bekijken Bekijk op cve.org ↗