CVE-2004-1824: XSS
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1824?
CVE-2004-1824 is considered a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2004-1824?
To fix CVE-2004-1824, update your vBulletin to a version later than 3.0 that addresses the cross-site scripting vulnerability.
What systems are affected by CVE-2004-1824?
CVE-2004-1824 affects Jelsoft vBulletin versions before 3.0, specifically versions like 2.0, 2.1, and 2.2.
What kind of attack can exploit CVE-2004-1824?
CVE-2004-1824 can be exploited through cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages.
Is user data at risk with CVE-2004-1824?
Yes, CVE-2004-1824 can lead to unauthorized access to user data through XSS, posing a risk to user privacy and security.