EDB-22042

functional

vBulletin 2.0.x/2.2.x - 'members2.php' Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor Sp.ICpublished 2002-11-25catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2002-2235USmedium5.0Exploit
member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan