CVE-2001-0897

2001-11-15T05:00:00
ID CVE-2001-0897
Type cve
Reporter cve@mitre.org
Modified 2016-10-18T02:12:00

Description

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.