|
VBulletin Multiple Module HTML Injection Vulnerability
VBulletin is reported prone to an HTML injection vulnerability. This issue affects the 'newreply.php' and 'newthread.php' scripts. An attacker may exploit this issue by including hostile HTML and script code in fields that may be viewable by other users, potentially allowing for theft of cookie-based authentication credentials and other attacks. This issue is reported to affect VBulletin version 3.0.1, however, it is likely that other versions are affected as well. |
|
 Privacy Statement |
