CVE-2002-1679: XSS

Published Dec 31, 2002

Updated

Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script as other users by injecting script into a bulletin board message.

Affected Software

1 affected component

Jelsoft vBulletin=2.2.0

Event History

Dec 31, 2002

CVE Published

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1679?

CVE-2002-1679 is considered a medium severity vulnerability due to its potential to allow remote attackers to execute arbitrary scripts.

How do I fix CVE-2002-1679?

To fix CVE-2002-1679, it is recommended to update vBulletin to a secure version that addresses the cross-site scripting vulnerability.

What types of attacks are possible with CVE-2002-1679?

CVE-2002-1679 allows attackers to conduct cross-site scripting attacks, potentially leading to session hijacking or user impersonation.

Who is affected by CVE-2002-1679?

Users of Jelsoft vBulletin version 2.2.0 are specifically affected by CVE-2002-1679.

What is the nature of the vulnerability in CVE-2002-1679?

CVE-2002-1679 is a cross-site scripting vulnerability that allows injection of malicious scripts into bulletin board messages.