CVE-2012-6668

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Shout Reports in the DragonByte Technologies vBShout module before 6.0.6 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the (1) reportreason parameter in actions/doreport.php or (2) modnotes parameter in actions/updatereport.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/74345

http://www.securityfocus.com/bid/52715

http://www.dragonbyte-tech.com/f4/vbactivity-vbshout-forumon-rpg-vbdownloads-vbquiz-updates-security-releases-6876/

http://secunia.com/advisories/48519

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS