CVE-2018-12580

N/A

Description

library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature.

CVE Details

CVSS v3.1 ScoreN/A

Published6/19/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

dragonbyte-tech:vbsecurity

Weaknesses (CWE)

CWE-79

References

https://www.dragonbyte-tech.com/threads/security-bulletin-low-vbsecurity-for-vbulletin-3-vbulletin-4-partial-xss.22534/(cve@mitre.org)

https://www.dragonbyte-tech.com/threads/security-bulletin-low-vbsecurity-for-vbulletin-3-vbulletin-4-partial-xss.22534/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.