Vulnerabilities > CVE-2007-2908 - HTML Injection vulnerability in VBulletin Calendar.PHP

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
jelsoft
exploit available
NVD
Published: 2007-05-30
Updated: 2018-10-16

Summary

Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action.

Vulnerable Configurations

Part Description Count
Application
Jelsoft
1

Exploit-Db

descriptionVBulletin 3.6.6 Calendar.PHP HTML Injection Vulnerability. CVE-2007-2908 . Webapps exploit for php platform
idEDB-ID:30047
last seen2016-02-03
modified2007-05-16
published2007-05-16
reporterlaurent gaffie
sourcehttps://www.exploit-db.com/download/30047/
titleVBulletin <= 3.6.6 Calendar.PHP HTML Injection Vulnerability

References