PT-2003-1731 · Infopop · Infopop Ultimate Bulletin Board

Antiacid · Publicado 2003-08-18 · Atualizado 2016-10-18 · CVE-2003-0587

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Infopop Ultimate Bulletin Board (UBB) versions 6.x

Description: The issue allows remote authenticated users to execute arbitrary web script and gain administrative access. This is achieved via the displayed name attribute of the ubber cookie.

Recommendations: For Infopop Ultimate Bulletin Board (UBB) versions 6.x, update the software to a version that fixes this issue, ensuring that the displayed name attribute of the ubber cookie is properly sanitized to prevent arbitrary web script execution.

Correção

Identificadores relacionados

CVE-2003-0587

Produtos afetados

Infopop Ultimate Bulletin Board

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2003-0587 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=105839276105934&w=2 · Nota