CVE-2003-0295

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-06-16 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability.

Affected products

Jelsoft Vbulletin: 3.0.0_beta_2

References

http://marc.info/?l=bugtraq&m=105292832607981&w=2
http://marc.info/?l=bugtraq&m=105293890422210&w=2
http://marc.info/?l=bugtraq&m=105292832607981&w=2
http://marc.info/?l=bugtraq&m=105293890422210&w=2

Get alerted when CVE-2003-0295 or the next vulnerability affects your stack