ID de Prueba:	1.3.6.1.4.1.25623.1.0.14833
Categoría:	Web application abuses
Título:	vBulletin <= 2.2.9 XSS Vulnerability - Active Check
Resumen:	vBulletin is vulnerable to a cross-site scripting (XSS) issue,; due to a failure of the application to properly sanitize user-supplied URI input.
Descripción:	Summary: vBulletin is vulnerable to a cross-site scripting (XSS) issue, due to a failure of the application to properly sanitize user-supplied URI input. Vulnerability Impact: As a result of this vulnerability, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of an unsuspecting user when followed. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. Affected Software/OS: vBulletin versions 2.2.9 and prior. Solution: Upgrade to latest version. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1824 BugTraq ID: 6226 http://www.securityfocus.com/bid/6226 BugTraq ID: 9887 http://www.securityfocus.com/bid/9887 Bugtraq: 20021121 XSS bug in vBulletin (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html Bugtraq: 20040316 JelSoft vBulletin Multiple XSS Vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=107945556112453&w=2 http://www.osvdb.org/4312 http://securitytracker.com/id?1009440 http://secunia.com/advisories/11142 http://www.iss.net/security_center/static/10679.php XForce ISS Database: vbulletin-showthread-xss(15495) https://exchange.xforce.ibmcloud.com/vulnerabilities/15495
Copyright	Copyright (C) 2004 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.