CVE-2022-25091

MEDIUM

Infopop Ultimate Bulletin Board <= 5.47a - Unauthenticated Private Message Disclosure via Quote Reply Feature

Title source: llm

Description

Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by unauthenticated users via the quote reply feature.

References (5)

Core 5

Core References

Broken Link

http://www.infopop.com/support/ubbclassic/version5.html

Mailing List

https://marc.info/?l=vuln-dev&m=97486849231786&w=2

Mailing List

https://vulners.com/securityvulns/SECURITYVULNS:DOC:954

Not Applicable

https://web.archive.org/web/20030207100935/

Release Notes

https://web.archive.org/web/20030207100935/http://www.infopop.com/support/ubbclassic/version5.html

Scores

CVSS v3 5.3

EPSS 0.0064

EPSS Percentile 46.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-863

Status published

Products (1)

infopop/ultimate_bulletin_board < 5.47a

Published Apr 27, 2023

Tracked Since Feb 18, 2026