CVE-2005-3260

Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php.

• http://marc.info/?l=bugtraq&m=112907535528616&w=2
• http://rgod.altervista.org/versatile100RC2.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/17174/Vendor Advisory
• http://www.osvdb.org/19969
• http://www.osvdb.org/19970
• http://www.osvdb.org/19971
• http://www.securityfocus.com/bid/15073Exploit
• http://marc.info/?l=bugtraq&m=112907535528616&w=2
• http://rgod.altervista.org/versatile100RC2.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/17174/Vendor Advisory
• http://www.osvdb.org/19969
• http://www.osvdb.org/19970
• http://www.osvdb.org/19971
• http://www.securityfocus.com/bid/15073Exploit

Published

Oct 20, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3254The CGIwrap program before 3.9 on Debian GNU/Linux uses an i…
• CVE-2005-3255The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in D…
• CVE-2005-3256The key selection dialogue in Enigmail before 0.92.1 can inc…
• CVE-2005-3257The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, a…
• CVE-2005-3258The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE…
• CVE-2005-3259Multiple SQL injection vulnerabilities in versatileBulletinB…
• CVE-2005-3261getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 li…
• CVE-2005-3262Format string vulnerability in RARLAB WinRAR 2.90 through 3.…
• CVE-2005-3263Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR…
• CVE-2005-3264Cross-site scripting (XSS) vulnerability in thread.php for Z…
• CVE-2005-3265Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.8…
• CVE-2005-3266Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…