Security Advisory

CVE-2004-0620

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2004-06-30 04:00:00
Last updated 2024-08-08 00:24:26
Assigner mitre
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel.