Sign in Get started

← All advisories

Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026

CVE-2004-2288

CVE-2004-2288

Description

Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter.

Affected products

25

Jelsoft/Vbulletin25 versions
cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*+ 24 more
- cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.