← Back

CVE-2004-2288

nvd nist
Published: Dec 31, 2004Modified: Apr 16, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter.

Affected (25)

Products: Jelsoft: Vbulletin
1 product
Vbulletin
Configuration A
25 vulnerable
Vulnerable SoftwareAffected Versions
Jelsoft
Version 1.0.1
Version 2.0.3
Version 2.0_rc2
Version 2.0_rc3
Version 2.2.0
Version 2.2.1
Version 2.2.2
Version 2.2.3
Version 2.2.4
Version 2.2.5
Version 2.2.6
Version 2.2.7
Version 2.2.8
Version 2.2.9
Version 2.3.0
Version 2.3.2
Version 2.3.3
Version 2.3.4
Version 3.0_beta_2
Version 3.0_beta_3
Version 3.0_beta_4
Version 3.0_beta_5
Version 3.0_beta_6
Version 3.0_beta_7
Version 3.0_gamma

References (4)

Source: cve@mitre.org
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

Timeline

No history available yet.