ID de Prueba:	1.3.6.1.4.1.25623.1.0.16280
Categoría:	Web application abuses
Título:	vBulletin < 2.3.6, 3.0.x < 3.0.6 XSS Vulnerability
Resumen:	vBulletin is vulnerable to a cross-site scripting (XSS) issue,; due to a failure of the application to properly sanitize user-supplied URI input.
Descripción:	Summary: vBulletin is vulnerable to a cross-site scripting (XSS) issue, due to a failure of the application to properly sanitize user-supplied URI input. Vulnerability Impact: As a result of this vulnerability, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of an unsuspecting user when followed. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. Affected Software/OS: vBulletin versions prior to 2.3.6 and 3.0.x prior to 3.0.6. Solution: Update to version 2.3.6, 3.0.6 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Copyright	Copyright (C) 2005 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.