Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2002-0223

Disclosure Date: May 16, 2002 (last updated February 22, 2025)
Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension, but ends in a different extension.
0
0
Attacker Value
Unknown

CVE-2002-0118

Disclosure Date: March 25, 2002 (last updated February 22, 2025)
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.
0
0
Attacker Value
Unknown

CVE-2001-0897

Disclosure Date: November 15, 2001 (last updated February 22, 2025)
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.
0
0
Attacker Value
Unknown

CVE-2000-0141

Disclosure Date: February 11, 2000 (last updated February 22, 2025)
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
0
0