CVE-2002-2235

member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected…

published October 14, 2007

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting (XSS) and possibly other attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02057 · 81.0th percentile
Published
2007-10-14T20:00Z
EPSS history
Timeline
  • 14 OCT 20:00Z
    member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected…
    cvelistv5