ID de Prueba:	1.3.6.1.4.1.25623.1.0.14792
Categoría:	Web application abuses
Título:	vBulletin XSS
Resumen:	The remote version of vBulletin is vulnerable; to a cross-site scripting issue, due to a failure of the application to properly; sanitize user-supplied URI input.
Descripción:	Summary: The remote version of vBulletin is vulnerable to a cross-site scripting issue, due to a failure of the application to properly sanitize user-supplied URI input. Vulnerability Impact: As a result of this vulnerability, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of an unsuspecting user when followed. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. Solution: Upgrade to vBulletin 3.0.2 or newer. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0620 BugTraq ID: 10602 http://www.securityfocus.com/bid/10602 Bugtraq: 20040624 vBulletin HTML Injection Vuln (Google Search) http://marc.info/?l=bugtraq&m=108809720026642&w=2 XForce ISS Database: vbulletin-newreply-newthread-xss(16502) https://exchange.xforce.ibmcloud.com/vulnerabilities/16502
Copyright	Copyright (C) 2004 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.