CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-2021

Cross-site scripting (XSS) vulnerability in admincp/apilog.php in vBulletin 4.2.2 and earlier, and 5.0.x through 5.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted XMLRPC API request, as demonstrated using the client name.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 71.2%

CVSS Severity

CVSS v2 Score 3.5

References

Products affected by CVE-2014-2021

Vbulletin » Vbulletin » Version: 3.0.0

cpe:2.3:a:vbulletin:vbulletin:3.0.0
Vbulletin » Vbulletin » Version: 3.5.4

cpe:2.3:a:vbulletin:vbulletin:3.5.4
Vbulletin » Vbulletin » Version: 3.6

cpe:2.3:a:vbulletin:vbulletin:3.6
Vbulletin » Vbulletin » Version: 3.6.7

cpe:2.3:a:vbulletin:vbulletin:3.6.7
Vbulletin » Vbulletin » Version: 3.8.10

cpe:2.3:a:vbulletin:vbulletin:3.8.10
Vbulletin » Vbulletin » Version: 3.8.11

cpe:2.3:a:vbulletin:vbulletin:3.8.11
Vbulletin » Vbulletin » Version: 3.8.7

cpe:2.3:a:vbulletin:vbulletin:3.8.7
Vbulletin » Vbulletin » Version: 3.8.8

cpe:2.3:a:vbulletin:vbulletin:3.8.8
Vbulletin » Vbulletin » Version: 3.8.9

cpe:2.3:a:vbulletin:vbulletin:3.8.9
Vbulletin » Vbulletin » Version: 4.0.0

cpe:2.3:a:vbulletin:vbulletin:4.0.0
Vbulletin » Vbulletin » Version: 4.0.1

cpe:2.3:a:vbulletin:vbulletin:4.0.1
Vbulletin » Vbulletin » Version: 4.0.2

cpe:2.3:a:vbulletin:vbulletin:4.0.2
Vbulletin » Vbulletin » Version: 4.0.3

cpe:2.3:a:vbulletin:vbulletin:4.0.3
Vbulletin » Vbulletin » Version: 4.0.4

cpe:2.3:a:vbulletin:vbulletin:4.0.4
Vbulletin » Vbulletin » Version: 4.0.5

cpe:2.3:a:vbulletin:vbulletin:4.0.5
Vbulletin » Vbulletin » Version: 4.0.6

cpe:2.3:a:vbulletin:vbulletin:4.0.6
Vbulletin » Vbulletin » Version: 4.0.7

cpe:2.3:a:vbulletin:vbulletin:4.0.7
Vbulletin » Vbulletin » Version: 4.0.8

cpe:2.3:a:vbulletin:vbulletin:4.0.8
Vbulletin » Vbulletin » Version: 4.1

cpe:2.3:a:vbulletin:vbulletin:4.1
Vbulletin » Vbulletin » Version: 4.1.1

cpe:2.3:a:vbulletin:vbulletin:4.1.1
Vbulletin » Vbulletin » Version: 4.1.2

cpe:2.3:a:vbulletin:vbulletin:4.1.2
Vbulletin » Vbulletin » Version: 4.1.3

cpe:2.3:a:vbulletin:vbulletin:4.1.3
Vbulletin » Vbulletin » Version: 4.2.0

cpe:2.3:a:vbulletin:vbulletin:4.2.0
Vbulletin » Vbulletin » Version: 4.2.2

cpe:2.3:a:vbulletin:vbulletin:4.2.2
Vbulletin » Vbulletin » Version: 5.0.0

cpe:2.3:a:vbulletin:vbulletin:5.0.0
Vbulletin » Vbulletin » Version: 5.0.1

cpe:2.3:a:vbulletin:vbulletin:5.0.1
Vbulletin » Vbulletin » Version: 5.0.2

cpe:2.3:a:vbulletin:vbulletin:5.0.2
Vbulletin » Vbulletin » Version: 5.0.3

cpe:2.3:a:vbulletin:vbulletin:5.0.3
Vbulletin » Vbulletin » Version: 5.0.4

cpe:2.3:a:vbulletin:vbulletin:5.0.4
Vbulletin » Vbulletin » Version: 5.0.5

cpe:2.3:a:vbulletin:vbulletin:5.0.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-2021

Products

Pricing

Contact Us