VbseoCVEs & Vulnerabilities
3 CVEs affecting Vbseo products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
3 CVEs→ All vendors
Most Affected Products
vbseo 3
CVE-2012-6666MEDIUM
vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter.
10 Feb 2020
6.1
CVSS
CVE-2014-9463HIGHpoc
functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php.
15 Sep 2017
8.8
CVSS
CVE-2010-1077MEDIUMpoc
Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the vbseourl parameter.
23 Mar 2010
6.8
CVSS
← PrevPage 1 / 1Next →