EDB-24124

functional

vBulletin 1.0/2.x/3.0 - 'index.php' User Interface Spoofing

view exploit source exploit_dbverifiedtype webappsauthor p0rkpublished 2004-05-17catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2004-2288USmedium4.3Exploit
Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan