Vulnerabilities > CVE-2004-2288 - Unspecified vulnerability in Jelsoft Vbulletin

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

exploit available

NVD

Published: 2004-12-31

Updated: 2008-09-05

Summary

Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter.

Part	Description	Count
Application	Jelsoft Jelsoft Vbulletin 2.2.0 Jelsoft Vbulletin 2.0_Rc2 Jelsoft Vbulletin 3.0_Beta_6 Jelsoft Vbulletin 2.3.0 Jelsoft Vbulletin 2.3.2 Jelsoft Vbulletin 2.0_Rc3 Jelsoft Vbulletin 2.2.1 Jelsoft Vbulletin 2.2.7 Jelsoft Vbulletin 2.0.3 Jelsoft Vbulletin 3.0_Beta_7 Jelsoft Vbulletin 3.0_Beta_3 Jelsoft Vbulletin 2.2.4 Jelsoft Vbulletin 3.0_Beta_2 Jelsoft Vbulletin 2.2.2 Jelsoft Vbulletin 2.2.5 Jelsoft Vbulletin 2.2.6 Jelsoft Vbulletin 3.0_Gamma Jelsoft Vbulletin 2.2.9 Jelsoft Vbulletin 3.0_Beta_4 Jelsoft Vbulletin 1.0.1 Jelsoft Vbulletin 2.2.8 Jelsoft Vbulletin 2.3.4 Jelsoft Vbulletin 2.2.3 Jelsoft Vbulletin 3.0_Beta_5 Jelsoft Vbulletin 2.3.3	25

description	VBulletin 1.0/2.x/3.0 Index.PHP User Interface Spoofing Weaknessa. CVE-2004-2288. Webapps exploit for php platform
id	EDB-ID:24124
last seen	2016-02-02
modified	2004-05-17
published	2004-05-17
reporter	p0rk
source	https://www.exploit-db.com/download/24124/
title	VBulletin 1.0/2.x/3.0 Index.PHP User Interface Spoofing Weakness