PT-2002-1204 · Infopop · Infopop Ultimate Bulletin Board

Publicado 2002-03-15 · Atualizado 2008-11-04 · CVE-2002-0118

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Infopop Ultimate Bulletin Board (UBB) version 6.2.0 Beta Release 1.0

Description The issue allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.

Recommendations For Infopop Ultimate Bulletin Board (UBB) version 6.2.0 Beta Release 1.0, consider disabling the ability to post messages containing IMG tags until a patch is available. Restrict access to sensitive areas of the board to minimize the risk of exploitation. Avoid allowing users to post encoded Javascript in messages. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-0118

Produtos afetados

Infopop Ultimate Bulletin Board

Referências · 5

• 🔥 https://exploit-db.com/exploits/21209 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/249031 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0118 · Nota de Segurança
• http://iss.net/security_center/static/7838.php · Aviso do Fabricante
• http://securityfocus.com/bid/3829 · Nota