3.5.4

DATE	CVE	VULNERABILITY TITLE	RISK
2006-12-28	CVE-2006-6779	Unspecified vulnerability in Jelsoft Vbulletin Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript. network jelsoft	6.8
2006-08-21	CVE-2006-4273	Unspecified vulnerability in Jelsoft Vbulletin 3.5.4/3.6.0 Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitrary web script or HTML by uploading an attachment with a .pdf extension that contains JavaScript, which is processed as script by Microsoft Internet Explorer 6. network jelsoft	6.8
2006-04-18	CVE-2006-1816	Remote Security vulnerability in Vbulletin 3.5.1/3.5.2/3.5.4 PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to (1) ImpExModule.php, (2) ImpExController.php, and (3) ImpExDisplay.php. network low complexity jelsoft	5.0