CVE-2003-1031
vBulletin 3.0 Beta 2 - Cross-Site Scripting via Optional Profile Fields
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-1031. PoCs published by Ferruh Mavituna.
AI-analyzed exploit summary This exploit demonstrates an HTML injection vulnerability in vBulletin's register.php script. It uses a hidden form and JavaScript to inject malicious script code into the 'field1' parameter, which is then submitted to the server.
Description
Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2) "Biography", or (3) "Occupation."
Exploits (1)
This exploit demonstrates an HTML injection vulnerability in vBulletin's register.php script. It uses a hidden form and JavaScript to inject malicious script code into the 'field1' parameter, which is then submitted to the server.