Vulnerability in Jelsoft Vbulletin
CVE-2005-4621
Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extension such as .jpg.
EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.
Affected products
- Jelsoft Vbulletin — versions 1.0.1, 2.0.3, 2.0_rc2
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)