EDB-22599

functional

vBulletin 3.0 - Private Message HTML Injection

view exploit source exploit_dbverifiedtype webappsauthor Ferruh Mavitunapublished 2003-05-14catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2003-0295USmedium6.8Exploit
Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capabil…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan