Vulnerabilities > CVE-2004-2288 - Unspecified vulnerability in Jelsoft Vbulletin

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

exploit available

NVD

Published: 2004-12-31

Updated: 2008-09-05

Summary

Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter.

Part	Description	Count
Application	Jelsoft Jelsoft Vbulletin 1.0.1 Jelsoft Vbulletin 2.0.3 Jelsoft Vbulletin 2.0_Rc2 Jelsoft Vbulletin 2.0_Rc3 Jelsoft Vbulletin 2.2.0 Jelsoft Vbulletin 2.2.1 Jelsoft Vbulletin 2.2.2 Jelsoft Vbulletin 2.2.3 Jelsoft Vbulletin 2.2.4 Jelsoft Vbulletin 2.2.5 Jelsoft Vbulletin 2.2.6 Jelsoft Vbulletin 2.2.7 Jelsoft Vbulletin 2.2.8 Jelsoft Vbulletin 2.2.9 Jelsoft Vbulletin 2.3.0 Jelsoft Vbulletin 2.3.2 Jelsoft Vbulletin 2.3.3 Jelsoft Vbulletin 2.3.4 Jelsoft Vbulletin 3.0_Beta_2 Jelsoft Vbulletin 3.0_Beta_3 Jelsoft Vbulletin 3.0_Beta_4 Jelsoft Vbulletin 3.0_Beta_5 Jelsoft Vbulletin 3.0_Beta_6 Jelsoft Vbulletin 3.0_Beta_7 Jelsoft Vbulletin 3.0_Gamma	25

description	VBulletin 1.0/2.x/3.0 Index.PHP User Interface Spoofing Weaknessa. CVE-2004-2288. Webapps exploit for php platform
id	EDB-ID:24124
last seen	2016-02-02
modified	2004-05-17
published	2004-05-17
reporter	p0rk
source	https://www.exploit-db.com/download/24124/
title	VBulletin 1.0/2.x/3.0 Index.PHP User Interface Spoofing Weakness