2.2.3

DATE	CVE	VULNERABILITY TITLE	RISK
2004-12-31	CVE-2004-1824	Cross-Site Scripting vulnerability in VBulletin Memberlist.PHP Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php. network jelsoft	4.3
2002-12-31	CVE-2002-2235	Numeric Errors vulnerability in Jelsoft Vbulletin member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting (XSS) and possibly other attacks. network low complexity jelsoft CWE-189	5.0
2002-12-31	CVE-2002-1922	Cross-Site Scripting vulnerability in Multiple VBulletin Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url variables. network jelsoft	4.3
2002-12-31	CVE-2002-1678	Cross-Site Scripting vulnerability in VBulletin Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits. network jelsoft	4.3