Dragonbyte-tech

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Dragonbyte-tech records in CISA KEV

No Dragonbyte-tech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Forumon Rpg Module 1 record LOW Vbactivity Module 1 record LOW Vbdownloads Module 1 record LOW Vbsecurity 1 record LOW Vbshout 1 record LOW Vbshout Module 1 record LOW

Records

1 record in Vbsecurity · all components

TI-2018-09029 CVE-2018-12580 · GHSA-g9cp-6qcq-xfw7

library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0…

LOW 28

library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00647 Published 2018-06-19 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	6
Low	0
No CVSS	0