Cross-site scripting (XSS) vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies vBDownloads module 1.3.2 and earlier for vBulletin allows remote attackers to inject arbitrary web script or HTML via the mirrors[] parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-01-11T20:00:00
Updated: 2024-08-06T21:36:02.000Z
Reserved: 2014-11-20T00:00:00
Link: CVE-2012-6682
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-01-11T20:29:00.393
Modified: 2018-01-31T14:48:22.470
Link: CVE-2012-6682
Redhat
No data.