CVE-2008-3773: XSS
Cross-site scripting (XSS) vulnerability in vBulletin 3.7.2 PL1 and 3.6.10 PL3, when "Show New Private Message Notification Pop-Up" is enabled, allows remote authenticated users to inject arbitrary web script or HTML via a private message subject (aka newpm[title]).
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3773?
CVE-2008-3773 has a medium severity level due to its potential for cross-site scripting exploits.
How do I fix CVE-2008-3773?
To fix CVE-2008-3773, upgrade vBulletin to at least version 3.7.3 or apply any available security patches.
Who is affected by CVE-2008-3773?
All remote authenticated users in vBulletin versions 3.6.10 PL3 and 3.7.2 PL1 are affected by CVE-2008-3773.
What type of vulnerability is CVE-2008-3773?
CVE-2008-3773 is classified as a cross-site scripting (XSS) vulnerability.
What impact does CVE-2008-3773 have on web applications?
CVE-2008-3773 allows attackers to inject arbitrary web scripts or HTML into private messages, potentially compromising users' sessions.