Unrated severityNVD Advisory· Published Jun 17, 2008· Updated Apr 23, 2026
CVE-2008-2744
CVE-2008-2744
Description
Cross-site scripting (XSS) vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors and an "obscure method." NOTE: the vector is probably in the redirect parameter to the Admin Control Panel (admincp/index.php).
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- www.securityfocus.com/bid/29704nvdExploit
- secunia.com/advisories/30733nvdVendor Advisory
- securityreason.com/securityalert/3946nvd
- www.securityfocus.com/archive/1/493340/100/0/threadednvd
- www.securitytracker.com/idnvd
- www.vbulletin.com/forum/showthread.phpnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/43090nvd
News mentions
0No linked articles in our index yet.