Dragonbyte Tech

1 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-12580 Jun 19, 16:29 MEDIUM PATCH This Month

library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP XSS Vbsecurity Dragonbyte Tech

NVD

CVSS 3.0

6.1

EPSS

0.6%

CVE-2018-12580

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP XSS Vbsecurity +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy