Lucene search

[email protected]CVE-2012-5104

HistorySep 23, 2012 - 5:55 p.m.

CVE-2012-5104

2012-09-2317:55:07

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-5104

xss

vulnerability

ubb.threads

web script

html

forums

ubbthreads.php

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.4%

JSON

Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter.

Affected configurations

NVD

Node

ubbcentralubb.threads

ubbcentralubb.threadsRange≤7.5.6

ubbcentralubb.threadsMatch3.4

ubbcentralubb.threadsMatch3.5

ubbcentralubb.threadsMatch5.0

ubbcentralubb.threadsMatch5.5.1

ubbcentralubb.threadsMatch6.0

ubbcentralubb.threadsMatch6.0.1

ubbcentralubb.threadsMatch6.0.2

ubbcentralubb.threadsMatch6.0.3

ubbcentralubb.threadsMatch6.1

ubbcentralubb.threadsMatch6.1.1

ubbcentralubb.threadsMatch6.2

ubbcentralubb.threadsMatch6.2.1

ubbcentralubb.threadsMatch6.2.2

ubbcentralubb.threadsMatch6.2.3

ubbcentralubb.threadsMatch6.3

ubbcentralubb.threadsMatch6.3.1

ubbcentralubb.threadsMatch6.4

ubbcentralubb.threadsMatch6.4.1

ubbcentralubb.threadsMatch6.4.2

ubbcentralubb.threadsMatch6.4.3

ubbcentralubb.threadsMatch6.4.4

ubbcentralubb.threadsMatch6.5

ubbcentralubb.threadsMatch6.5.1

ubbcentralubb.threadsMatch6.5.1.1

ubbcentralubb.threadsMatch6.5.2

ubbcentralubb.threadsMatch6.5.2_beta2

ubbcentralubb.threadsMatch6.5.3

ubbcentralubb.threadsMatch7.0

ubbcentralubb.threadsMatch7.1

ubbcentralubb.threadsMatch7.2

ubbcentralubb.threadsMatch7.3.1

ubbcentralubb.threadsMatch7.4

ubbcentralubb.threadsMatch7.4.1

ubbcentralubb.threadsMatch7.4.2

ubbcentralubb.threadsMatch7.5

ubbcentralubb.threadsMatch7.5.1

ubbcentralubb.threadsMatch7.5.2

ubbcentralubb.threadsMatch7.5.3

ubbcentralubb.threadsMatch7.5.4

ubbcentralubb.threadsMatch7.5.5

ubbcentralubb.threadsMatch7.6

CPENameOperatorVersion
ubbcentral:ubb.threadsubbcentral ubb.threadseq*
ubbcentral:ubb.threadsubbcentral ubb.threadsle7.5.6
ubbcentral:ubb.threadsubbcentral ubb.threadseq3.4
ubbcentral:ubb.threadsubbcentral ubb.threadseq3.5
ubbcentral:ubb.threadsubbcentral ubb.threadseq5.0
ubbcentral:ubb.threadsubbcentral ubb.threadseq5.5.1
ubbcentral:ubb.threadsubbcentral ubb.threadseq6.0
ubbcentral:ubb.threadsubbcentral ubb.threadseq6.0.1
ubbcentral:ubb.threadsubbcentral ubb.threadseq6.0.2
ubbcentral:ubb.threadsubbcentral ubb.threadseq6.0.3

CPE	Name	Operator	Version
ubbcentral:ubb.threads	ubbcentral ubb.threads	eq	*
ubbcentral:ubb.threads	ubbcentral ubb.threads	le	7.5.6
ubbcentral:ubb.threads	ubbcentral ubb.threads	eq	3.4
ubbcentral:ubb.threads	ubbcentral ubb.threads	eq	3.5
ubbcentral:ubb.threads	ubbcentral ubb.threads	eq	5.0
ubbcentral:ubb.threads	ubbcentral ubb.threads	eq	5.5.1
ubbcentral:ubb.threads	ubbcentral ubb.threads	eq	6.0
ubbcentral:ubb.threads	ubbcentral ubb.threads	eq	6.0.1
ubbcentral:ubb.threads	ubbcentral ubb.threads	eq	6.0.2
ubbcentral:ubb.threads	ubbcentral ubb.threads	eq	6.0.3

Rows per page:

1-10 of 431

References

packetstormsecurity.org/files/108353/ubbforum-xss.txt

secunia.com/advisories/47452

st2tea.blogspot.com/2012/01/ubb-forum756-cross-site-scripting.html

www.osvdb.org/78192

www.securityfocus.com/bid/51275

exchange.xforce.ibmcloud.com/vulnerabilities/72147

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.4%

JSON

Related for CVE-2012-5104

cvelist1 nvd1 prion1