CVE-2006-1673

CVE-2006-1673

EPSS 1.9%

Cross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html http://secunia.com/advisories/19562 https://exchange.xforce.ibmcloud.com/vulnerabilities/25649 http://www.osvdb.org/24448 http://www.securityfocus.com/bid/17407 http://www.vupen.com/english/advisories/2006/1267