CVE-2003-1031: XSS

Published Jan 22, 2004

Updated

Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2) "Biography", or (3) "Occupation."

Affected Software

2 affected components

Jelsoft vBulletin=3.0_beta_2

Event History

Jan 22, 2004

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1031?

The severity of CVE-2003-1031 is classified as medium due to its cross-site scripting capabilities.

How do I fix CVE-2003-1031?

To fix CVE-2003-1031, upgrade to a later, unaffected version of vBulletin that addresses this vulnerability.

What software is affected by CVE-2003-1031?

CVE-2003-1031 specifically affects vBulletin version 3.0 Beta 2.

What types of fields are vulnerable in CVE-2003-1031?

CVE-2003-1031 allows for arbitrary HTML or web script injection through optional fields such as 'Interests-Hobbies', 'Biography', and 'Occupation'.

Who can exploit the vulnerability CVE-2003-1031?

Remote attackers can exploit the vulnerability CVE-2003-1031 to inject malicious scripts into vBulletin 3.0 Beta 2.