Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter.
2004-12-31T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 4.3 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.6
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | jelsoft | vbulletin | 1.0.1 | Yes |
| Application | jelsoft | vbulletin | 2.0.3 | Yes |
| Application | jelsoft | vbulletin | 2.0_rc2 | Yes |
| Application | jelsoft | vbulletin | 2.0_rc3 | Yes |
| Application | jelsoft | vbulletin | 2.2.0 | Yes |
| Application | jelsoft | vbulletin | 2.2.1 | Yes |
| Application | jelsoft | vbulletin | 2.2.2 | Yes |
| Application | jelsoft | vbulletin | 2.2.3 | Yes |
| Application | jelsoft | vbulletin | 2.2.4 | Yes |
| Application | jelsoft | vbulletin | 2.2.5 | Yes |
| Application | jelsoft | vbulletin | 2.2.6 | Yes |
| Application | jelsoft | vbulletin | 2.2.7 | Yes |
| Application | jelsoft | vbulletin | 2.2.8 | Yes |
| Application | jelsoft | vbulletin | 2.2.9 | Yes |
| Application | jelsoft | vbulletin | 2.3.0 | Yes |
| Application | jelsoft | vbulletin | 2.3.2 | Yes |
| Application | jelsoft | vbulletin | 2.3.3 | Yes |
| Application | jelsoft | vbulletin | 2.3.4 | Yes |
| Application | jelsoft | vbulletin | 3.0_beta_2 | Yes |
| Application | jelsoft | vbulletin | 3.0_beta_3 | Yes |
| Application | jelsoft | vbulletin | 3.0_beta_4 | Yes |
| Application | jelsoft | vbulletin | 3.0_beta_5 | Yes |
| Application | jelsoft | vbulletin | 3.0_beta_6 | Yes |
| Application | jelsoft | vbulletin | 3.0_beta_7 | Yes |
| Application | jelsoft | vbulletin | 3.0_gamma | Yes |