CPE Details
Infopop Ultimate Bulletin Board (UBB) 5.07
5.07
2023-05-03
20h54 +00:00
20h54 +00:00
2023-05-03
20h59 +00:00
20h59 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:infopop:ultimate_bulletin_board:5.07:*:*:*:*:*:*:*
Informations
Vendor
infopopProduct
ultimate_bulletin_boardVersion
5.07Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by unauthenticated users via the quote reply feature. | 5.3 |
Moyen |
||
| Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field. | 5 |
|||
| Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file. | 5 |
