Vulnerabilities > CVE-2007-2908 - Unspecified vulnerability in Jelsoft Vbulletin

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
jelsoft
exploit available
NVD
Published: 2007-05-30
Updated: 2018-10-16

Summary

Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action.

Vulnerable Configurations

Part Description Count
Application
Jelsoft
1

Exploit-Db

descriptionVBulletin 3.6.6 Calendar.PHP HTML Injection Vulnerability. CVE-2007-2908 . Webapps exploit for php platform
idEDB-ID:30047
last seen2016-02-03
modified2007-05-16
published2007-05-16
reporterlaurent gaffie
sourcehttps://www.exploit-db.com/download/30047/
titleVBulletin <= 3.6.6 Calendar.PHP HTML Injection Vulnerability

References