3860 matches found
CVE-2002-0118
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag...
CVE-2002-0118
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag...
CVE-2001-0897
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB before 5.47e allows remote attackers to steal user cookies via an IMG tag that references an about: URL with an onerror field...
Дырки в Ultimate Bulletin Board (javascript, cookie)
Можно вставить javascript в таг IMG, кроме того при проверке куки не проверяется пароль пользователя...
CVE-2001-0897
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB before 5.47e allows remote attackers to steal user cookies via an IMG tag that references an about: URL with an onerror field...
Дырка в Ultimate Bulletin Board
Можно посмотреть сообщения в закрытой паролем конференции используя функцию ответа с квотированием...
More on Ultimate Bullering Board
In response to Scott Ashman's post about UBB. After i discovered this bug last week i tried to contact infopop on 3 email adresses from their contact page i finally managed to find one that didn't bounce, but i haven't recieved any response yet. Anyway, Scott describes a way to retrieve other...
En: ubb hole
----- Original Message ----- From: tdf To: [email protected] Sent: Monday, November 20, 2000 2:46 PM Subject: ubb hole ----------------------------------------------------------------------------------- Ultimate Bulletin Board - Private forums security hole, by tdf [email protected]...
CVE-2000-0141
Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...
CVE-1999-0854
CVE-1999-0854 affects Ultimate Bulletin Board. The issue arises because data files are stored in the cgi-bin directory, enabling remote viewing by an attacker when the HTTP server erroneously tries to execute such files. Documentation in PT-1999-1407 confirms affected software but does not specif...
ultimatebb.txt
Hello. Writing cgi scripts in perl is simple. It's also rather safe, providing authors follow very simple instructions. But they don't. Browsing some site, I found that their forums were based not on home- made scripts, but rather commercial software product. Hey, said I to myself, remember those...
CVE-2000-0141
Infopop Ultimate Bulletin Board UBB allows remote attackers to execute commands via shell metacharacters in the topic hidden field...
PT-2000-1126 · Infopop · Infopop Ultimate Bulletin Board
Name of the Vulnerable Software and Affected Versions: Infopop Ultimate Bulletin Board UBB affected versions not specified Description: The issue allows remote attackers to execute commands by injecting shell metacharacters into the topic hidden field. Recommendations: At the moment, there is no...
PT-1999-1407 · Unknown · Ultimate Bulletin Board
Name of the Vulnerable Software and Affected Versions: Ultimate Bulletin Board affected versions not specified Description: The issue allows remote attackers to view data files if an error occurs when the HTTP server attempts to execute the file, due to the storage of data files in the cgi-bin...
VS 2010 SP1 - Ultimate - All Languages
VS 2010 SP1 Ultimate CHS, CHT, DEU, ENU, ESN, FRA, ITA, JPN, KOR, RUS...
Windows Ultimate Extras
Category for Windows Ultimate Extras...
VS 2010 - Ultimate - All Languages
VS 2010 RTM Ultimate CHS, CHT, DEU, ENU, ESN, FRA, ITA, JPN, KOR, RUS...
Microsoft Visual Studio 2012 Shell (Minimum) MSI - Language Neutral
This MSI is included in all languages of the following bundles products a customer would install: Team Explorer 2012 Feedback Client 2012 Professional 2012 Premium 2012 Ultimate 2012 Test Professional 2012 Express 2012 for Web Express 2012 for Windows 8 Express 2012 for Windows Desktop Express 20...