CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-3020

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to language.php, (5) orderby parameter to modlog.php, and the (6) hex, (7) rgb, or (8) expandset parameter to template.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 63.6%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2005-3020

Jelsoft » Vbulletin » Version: 1.0.1

cpe:2.3:a:jelsoft:vbulletin:1.0.1
Jelsoft » Vbulletin » Version: 2.0.3

cpe:2.3:a:jelsoft:vbulletin:2.0.3
Jelsoft » Vbulletin » Version: 2.0_rc2

cpe:2.3:a:jelsoft:vbulletin:2.0_rc2
Jelsoft » Vbulletin » Version: 2.0_rc3

cpe:2.3:a:jelsoft:vbulletin:2.0_rc3
Jelsoft » Vbulletin » Version: 2.2.0

cpe:2.3:a:jelsoft:vbulletin:2.2.0
Jelsoft » Vbulletin » Version: 2.2.1

cpe:2.3:a:jelsoft:vbulletin:2.2.1
Jelsoft » Vbulletin » Version: 2.2.2

cpe:2.3:a:jelsoft:vbulletin:2.2.2
Jelsoft » Vbulletin » Version: 2.2.3

cpe:2.3:a:jelsoft:vbulletin:2.2.3
Jelsoft » Vbulletin » Version: 2.2.4

cpe:2.3:a:jelsoft:vbulletin:2.2.4
Jelsoft » Vbulletin » Version: 2.2.5

cpe:2.3:a:jelsoft:vbulletin:2.2.5
Jelsoft » Vbulletin » Version: 2.2.6

cpe:2.3:a:jelsoft:vbulletin:2.2.6
Jelsoft » Vbulletin » Version: 2.2.7

cpe:2.3:a:jelsoft:vbulletin:2.2.7
Jelsoft » Vbulletin » Version: 2.2.8

cpe:2.3:a:jelsoft:vbulletin:2.2.8
Jelsoft » Vbulletin » Version: 2.2.9

cpe:2.3:a:jelsoft:vbulletin:2.2.9
Jelsoft » Vbulletin » Version: 2.3.0

cpe:2.3:a:jelsoft:vbulletin:2.3.0
Jelsoft » Vbulletin » Version: 2.3.2

cpe:2.3:a:jelsoft:vbulletin:2.3.2
Jelsoft » Vbulletin » Version: 2.3.3

cpe:2.3:a:jelsoft:vbulletin:2.3.3
Jelsoft » Vbulletin » Version: 2.3.4

cpe:2.3:a:jelsoft:vbulletin:2.3.4
Jelsoft » Vbulletin » Version: 3.0

cpe:2.3:a:jelsoft:vbulletin:3.0
Jelsoft » Vbulletin » Version: 3.0.1

cpe:2.3:a:jelsoft:vbulletin:3.0.1
Jelsoft » Vbulletin » Version: 3.0.2

cpe:2.3:a:jelsoft:vbulletin:3.0.2
Jelsoft » Vbulletin » Version: 3.0.3

cpe:2.3:a:jelsoft:vbulletin:3.0.3
Jelsoft » Vbulletin » Version: 3.0.4

cpe:2.3:a:jelsoft:vbulletin:3.0.4
Jelsoft » Vbulletin » Version: 3.0.5

cpe:2.3:a:jelsoft:vbulletin:3.0.5
Jelsoft » Vbulletin » Version: 3.0.6

cpe:2.3:a:jelsoft:vbulletin:3.0.6
Jelsoft » Vbulletin » Version: 3.0.7

cpe:2.3:a:jelsoft:vbulletin:3.0.7
Jelsoft » Vbulletin » Version: 3.0.8

cpe:2.3:a:jelsoft:vbulletin:3.0.8
Jelsoft » Vbulletin » Version: 3.0.9

cpe:2.3:a:jelsoft:vbulletin:3.0.9
Jelsoft » Vbulletin » Version: 3.0_beta_2

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2
Jelsoft » Vbulletin » Version: 3.0_beta_3

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3
Jelsoft » Vbulletin » Version: 3.0_beta_4

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4
Jelsoft » Vbulletin » Version: 3.0_beta_5

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5
Jelsoft » Vbulletin » Version: 3.0_beta_6

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6
Jelsoft » Vbulletin » Version: 3.0_beta_7

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7
Jelsoft » Vbulletin » Version: 3.0_gamma

cpe:2.3:a:jelsoft:vbulletin:3.0_gamma

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-3020

Products

Pricing

Contact Us