CVE Vulnerabilities

CVE-2002-1922

Published: Dec 31, 2002 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url variables.

Affected Software

Name Vendor Start Version End Version
Vbulletin Jelsoft 2.0_rc2 2.0_rc2
Vbulletin Jelsoft 2.0_rc3 2.0_rc3
Vbulletin Jelsoft 2.2.0 2.2.0
Vbulletin Jelsoft 2.2.1 2.2.1
Vbulletin Jelsoft 2.2.2 2.2.2
Vbulletin Jelsoft 2.2.3 2.2.3
Vbulletin Jelsoft 2.2.4 2.2.4
Vbulletin Jelsoft 2.2.5 2.2.5
Vbulletin Jelsoft 2.2.6 2.2.6
Vbulletin Jelsoft 2.2.7 2.2.7
Vbulletin Jelsoft 2.2.8 2.2.8

References