CVE-2001-0897

The CVE-2001-0897 issue affects Infopop Ultimate Bulletin Board (UBB) versions prior to 5.47e. A cross-site scripting flaw allows remote attackers to steal user cookies by exploiting an [IMG] tag that references an about: URL with an onerror field. The vulnerability is tied to the HTML/img handli...

CVE-2003-0587

CVE-2003-0587 describes a cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x. The issue allows remote authenticated users to execute arbitrary web script and potentially gain administrative access via the displayed name attribute of the “ubber” cookie. The avail...

CVE-2005-1199

This CVE refers to an SQL injection in UBB.Threads, specifically in printthread.php, where the main parameter is exploitable due to insufficient input validation. The vulnerability affects UBB.Threads installations that process that script (e.g., historical references to versions around 6.5.x bet...

CVE-2022-25091

The CVE-2022-25091 entry concerns Infopop Ultimate Bulletin Board up to version 5.47a. The vulnerability allows unauthenticated users to disclose all messages posted inside private forums via the quote reply feature. The issue is a confidentiality impact (C:L) with no integrity or availability im...

CVE-2002-0118

The CVE-2002-0118 entry concerns Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0, where a cross‑site scripting (XSS) vulnerability exists. According to the description, remote attackers can execute arbitrary script and steal cookies by sending a message containing encoded Javascript ...

CVE-2000-0141

Infopop Ultimate Bulletin Board (UBB) is affected by CVE-2000-0141. The vulnerability allows remote attackers to execute commands by injecting shell metacharacters into the topic hidden field. Connected sources corroborate that this affects Infopop UBB, with the PT-2000-1126 entry noting that aff...

CVE-1999-0854

CVE-1999-0854 affects Ultimate Bulletin Board. The issue arises because data files are stored in the cgi-bin directory, enabling remote viewing by an attacker when the HTTP server erroneously tries to execute such files. Documentation in PT-1999-1407 confirms affected software but does not specif...

CVE-2002-0223

CVE-2002-0223 affects Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9. The vulnerability allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension but ends with a different, non-accepted extension. The issue is a fi...