PT-2001-2052 · Infopop · Infopop Ultimate Bulletin Board

Name of the Vulnerable Software and Affected Versions: Infopop Ultimate Bulletin Board UBB versions prior to 5.47e Description: The issue allows remote attackers to steal user cookies via an IMG tag that references an about: URL with an onerror field. This is a cross-site scripting vulnerability...