CVE-2004-1824

Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php.

Affected Software

Name	Vendor	Start Version	End Version
Vbulletin	Jelsoft	2.0 (including)	2.0 (including)
Vbulletin	Jelsoft	2.0.1 (including)	2.0.1 (including)
Vbulletin	Jelsoft	2.0.2 (including)	2.0.2 (including)
Vbulletin	Jelsoft	2.0_beta_2 (including)	2.0_beta_2 (including)
Vbulletin	Jelsoft	2.0_beta_3 (including)	2.0_beta_3 (including)
Vbulletin	Jelsoft	2.2.0 (including)	2.2.0 (including)
Vbulletin	Jelsoft	2.2.1 (including)	2.2.1 (including)
Vbulletin	Jelsoft	2.2.2 (including)	2.2.2 (including)
Vbulletin	Jelsoft	2.2.3 (including)	2.2.3 (including)
Vbulletin	Jelsoft	2.2.4 (including)	2.2.4 (including)
Vbulletin	Jelsoft	2.2.5 (including)	2.2.5 (including)
Vbulletin	Jelsoft	2.2.6 (including)	2.2.6 (including)
Vbulletin	Jelsoft	2.2.7 (including)	2.2.7 (including)
Vbulletin	Jelsoft	2.2.8 (including)	2.2.8 (including)
Vbulletin	Jelsoft	2.2.9_can (including)	2.2.9_can (including)
Vbulletin	Jelsoft	2.3.0 (including)	2.3.0 (including)
Vbulletin	Jelsoft	2.3.3 (including)	2.3.3 (including)
Vbulletin	Jelsoft	2.3.4 (including)	2.3.4 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2004-1824
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References