TROYANOSYVIRUS
Retour aux CVEs

CVE-2006-6040

N/A

Description

Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attackers to inject arbitrary web script or HTML via (1) the prefs parameter in a buildnavprefs action or (2) the navprefs parameter in a savenavprefs action.

Details CVE

Score CVSS v3.1N/A
Publie11/22/2006
Derniere modification4/23/2026
Sourcenvd
Observations honeypot0

Produits affectes

jelsoft:vbulletin

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.