[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKRf19v7EIaXSdS6b3smuw7mXG9LcH5Gz79R8a5Fvy1Y":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":40,"kevVulnerabilities":98,"topProductsByCves":99,"seoMetadata":105,"meta":114},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":39},15627,"jelsoft",5,60,0,70,"2009-06-23","j",[16,21,27,31,35],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},92800,"vbulletin",68,55,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},92798,"vbsupport_integrated_ticket_system",1,2,"2007-06-12",{"id":28,"product_name":29,"version_count":11,"cve_count":24,"kev_count":11,"last_cve_update":30},92796,"impex","2006-03-24",{"id":32,"product_name":33,"version_count":24,"cve_count":24,"kev_count":11,"last_cve_update":34},92797,"oscmax","2007-09-18",{"id":36,"product_name":37,"version_count":11,"cve_count":24,"kev_count":11,"last_cve_update":38},92799,"vbug_tracker","2006-04-07","Jelsoft is a technology vendor with 5 tracked products and 60 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[41,50,55,60,67,71,77,83,88,93],{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":48,"epssScore":49},"CVE-2005-0511","misc.php for vBulletin 3.0.6 and earlier, when \"Add Template Name in HTML Comments\" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.","2005-02-21",7.5,"v2","High",false,0.35818,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":48,"epssScore":54},"CVE-2002-1660","calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.","2002-12-31",0.11125,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":48,"epssScore":59},"CVE-2005-3019","Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL commands via the (1) request parameter to joinrequests.php, (2) limitnumber or (3) limitstart to user.php, (4) usertitle.php, or (5) usertools.php.","2005-09-21",0.03925,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":46,"severity":65,"isKev":48,"epssScore":66},"CVE-2004-0620","Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel.","2004-12-06",4.3,"Medium",0.03617,{"cveId":68,"description":69,"publishedDate":53,"cvssScore":64,"cvssVersion":46,"severity":65,"isKev":48,"epssScore":70},"CVE-2002-1922","Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url variables.",0.03581,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":46,"severity":65,"isKev":48,"epssScore":76},"CVE-2006-6779","Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript.","2006-12-28",6.8,0.03507,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":46,"severity":65,"isKev":48,"epssScore":82},"CVE-2006-2335","Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell access by uploading a CSS file that contains PHP code, then selecting the file via the style chooser, which causes the PHP code to be executed.  NOTE: the vendor was unable to reproduce this issue in 3.5.x.  NOTE: this issue might be due to direct static code injection.","2006-05-12",6.5,0.03386,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":9,"cvssVersion":46,"severity":65,"isKev":48,"epssScore":87},"CVE-2006-1816","PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to (1) ImpExModule.php, (2) ImpExController.php, and (3) ImpExDisplay.php.","2006-04-18",0.02932,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":48,"epssScore":92},"CVE-2001-0475","index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.","2001-06-27",0.02762,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":64,"cvssVersion":46,"severity":65,"isKev":48,"epssScore":97},"CVE-2006-1040","Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php.","2006-03-07",0.02603,[],[100,101,102,103,104],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":11,"cve_count":24,"kev_count":11,"last_cve_update":30},{"id":32,"product_name":33,"version_count":24,"cve_count":24,"kev_count":11,"last_cve_update":34},{"id":36,"product_name":37,"version_count":11,"cve_count":24,"kev_count":11,"last_cve_update":38},{"title":106,"metaDescription":107,"keywords":108,"structuredData":109},"Jelsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Jelsoft covering 5 products with 60 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Jelsoft vulnerabilities, Jelsoft security, Jelsoft CVE, Jelsoft threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":110,"@type":111,"name":112,"description":107,"url":113},"https:\u002F\u002Fschema.org","Organization","Jelsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fjelsoft",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":115,"apiVersion":116},"2026-10-17T20:16:32.820Z","3.0"]