CVE-2007-0830

Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators…

published February 7, 2007

CVSS
—
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors related to the (1) User Group Manager, (2) User Rank Manager, (3) User Title Manager, (4) BB Code Manager, (5) Attachment Manager, (6) Calendar Manager, and (7) Forums & Moderators functions. NOTE: the vendor disputes this issue, stating that modifying HTML is an intended privilege of an administrator. NOTE: it is possible that this issue overlaps CVE-2006-6040

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00912 · 59.4th percentile
Published
2007-02-07T22:00Z
EPSS history
Timeline
  • 07 FEB 22:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators…
    cvelistv5