20041213 Multiple XSS Vulnerabilities in several UBB.Thread Versionsmailing list
http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html CVE-2004-2510
UBBCentral UBB.Threads 6.2.3/6.5 - 'showflat.php?Cat' Cross-Site Scripting
Record summary
CVE-2004-2510 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBUBBCentral UBB.Threads 6.2.3/6.5 - 'showflat.php?Cat' Cross-Site ScriptingExploitDB exploitby dw. & ms.Not analyzed1 file
References
713452Third-party advisory
http://secunia.com/advisories/13452 1012503vdb entry
http://securitytracker.com/id?1012503 12364vdb entry
http://www.osvdb.org/12364 11900vdb entry
http://www.securityfocus.com/bid/11900 ubbthreads-multiple-scripts-xss(18432)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/18432 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-2510