CVE-2007-0869: XSS
Cross-site scripting (XSS) vulnerability in the Attachment Manager (admincp/attachment.php) in Jelsoft vBulletin 3.6.4 allows remote attackers to inject arbitrary web script or HTML via the Extension field. NOTE: this might be a duplicate of CVE-2007-0830.5. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0869?
CVE-2007-0869 is classified as a critical cross-site scripting (XSS) vulnerability that can allow attackers to inject arbitrary web scripts or HTML.
How do I fix CVE-2007-0869?
To fix CVE-2007-0869, upgrade vBulletin to a version that patches this vulnerability, specifically ensuring you are not using vBulletin 3.6.4.
Who is affected by CVE-2007-0869?
CVE-2007-0869 affects users of Jelsoft vBulletin version 3.6.4.
What are the consequences of exploiting CVE-2007-0869?
Exploiting CVE-2007-0869 could allow an attacker to execute malicious scripts in the context of a user's web browser, potentially stealing cookies or session tokens.
Is CVE-2007-0869 related to any other vulnerabilities?
Yes, CVE-2007-0869 might be a duplicate of CVE-2007-0830, highlighting similar XSS concerns.