Vulnerability in Jelsoft Vbulletin

CVE-2003-1031

Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2) "Biography", or (3) "Occupation."

EPSS: 0.014 (69.6th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH, Exploit)