Ubbcentral Ubb.threads : Security vulnerabilities, CVEs published in 2004

Copy

CVE-2004-2510

Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter.

Max CVSS

4.3

EPSS Score

0.72%

Published

2004-12-31

Updated

2017-07-11

CVE-2004-2509

Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML via the Cat parameter.

Max CVSS

4.3

EPSS Score

1.52%

Published

2004-12-31

Updated

2017-07-11

CVE-2004-1622

SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter.

Max CVSS

7.5

EPSS Score

0.25%

Published

2004-10-21

Updated

2017-07-11

3 vulnerabilities found

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!