[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZyBNK3iRnnIlzJgShIkKn5joIHV8M3TtllOnQP3-Udo":3,"g5a-risk:CVE-2006-2335":111},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":30,"weaknesses":69,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":107,"notableEvents":108},"CVE-2006-2335","What is CVE-2006-2335?","Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell access by uploading a CSS file that contains PHP code, then selecting the file via the style chooser, which causes the PHP code to be executed.  NOTE: the vendor was unable to reproduce this issue in 3.5.x.  NOTE: this issue might be due to direct static code injection.","Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell a...","2006-05-12T00:02:00","2026-06-16T22:24:48.45",6.5,"AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":4,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","SINGLE","PARTIAL","",null,"MEDIUM",8,6.4,false,[],0.03386,[34,34,34,34,34,34,34],"Medium",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"jelsoft","vbulletin","3.5.8","cpe:2.3:a:jelsoft:vbulletin:3.5.8:*:*:*:*:*:*:*",1,[45,50,54,57,61,63,65,67],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fb3hr0uz.persiangig.com\u002FVbStyleVuln.txt","Persiangig",[49],"Exploit",{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F433580\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":55,"source":52,"tags":56},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F433678\u002F100\u002F0\u002Fthreaded",[],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F26440","Ibmcloud",[],{"url":46,"source":47,"tags":62},[49],{"url":51,"source":52,"tags":64},[],{"url":55,"source":52,"tags":66},[],{"url":58,"source":59,"tags":68},[],[70],{"id":71,"name":71,"description":72},"Unknown","NVD-CWE-Other",[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2006-2335? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2006-2335, a medium severity cyber security vulnerability from 2006. Jelsoft vBulletin accepts uploads of Cascading Style Sheet...","CVE-2006-2335, CVE-2006-2335 vulnerability, CVE-2006-2335 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2006, CVSS score, exploit, patch, remediation, jelsoft security, vbulletin vulnerability","\u002Fwhat-is\u002Fcve-2006-2335",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2006-2335","Cybersecurity","CVE-2006-2335, CVE-2006-2335 vulnerability, CVE-2006-2335 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":28,"Negate":28,"Nodes":101},[102],{"Operator":103,"Negate":32,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":106,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9D9C02DA-F2B3-4915-BC7E-B562C01EC1F8",[],[],{"lastModified":11,"cacheTime":110,"version":22},1792268191392,{"score":112,"band":36,"action":113,"scoredAt":114},46,"Plan remediation","2026-10-17T06:34:08.205361+00:00"]