Vulnerabilities > Vbzoom > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-09-08 | CVE-2006-4634 | Cross-Site Scripting vulnerability in VBZoom Cross-site scripting (XSS) vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441. network vbzoom | 4.3 |
| 2006-03-10 | CVE-2006-1133 | Cross-Site Scripting vulnerability in Vbzoom 1.11 Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web script or HTML via the UserID parameter to (1) comment.php or (2) contact.php. network vbzoom | 4.3 |
| 2005-08-03 | CVE-2005-2441 | Cross-Site Scripting vulnerability in VBZooM Forum Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php. network vbzoom | 4.3 |