CVE-2006-1040

Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/19100
http://www.kapda.ir/advisory-266.html	Exploit Patch Vendor Advisory
http://www.osvdb.org/23614
http://www.securityfocus.com/archive/1/426537/100/0/threaded
http://www.securityfocus.com/archive/1/426589/100/0/threaded
http://www.securityfocus.com/bid/16919
http://www.vbulletin.com/forum/showthread.php?postid=1079030
http://www.vupen.com/english/advisories/2006/0808

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:jelsoft:vbulletin:3.0.12:::::::*
	cpe:2.3:a:jelsoft:vbulletin:3.5.3:::::::*

History

No history.

Information

Published : 2006-03-07 11:02

Updated : 2018-10-18 16:30

NVD link : CVE-2006-1040

Mitre link : CVE-2006-1040

CVE.ORG link : CVE-2006-1040

JSON object : View

Products Affected

jelsoft

vbulletin

CWE

NVD-CWE-Other

{"id": "CVE-2006-1040", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-03-07T11:02:00.000", "references": [{"url": "http://secunia.com/advisories/19100", "source": "cve@mitre.org"}, {"url": "http://www.kapda.ir/advisory-266.html", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/23614", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/426537/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/426589/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/16919", "source": "cve@mitre.org"}, {"url": "http://www.vbulletin.com/forum/showthread.php?postid=1079030", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/0808", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php."}], "lastModified": "2018-10-18T16:30:17.713", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jelsoft:vbulletin:3.0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36356B31-5EC5-4689-92CD-883088587936"}, {"criteria": "cpe:2.3:a:jelsoft:vbulletin:3.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86E53DA6-83A3-493A-8C98-DEA91F91D71E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "This vulnerability affects all versions of Jelsoft, vBulletin between 3.0.12 and 3.5.3"}