CVEvulnerability
CVE-2001-0897
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-11-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.
Affected configurations
• infopop ultimate bulletin board
• infopop ultimate bulletin board 1.0
• infopop ultimate bulletin board 2.0
• infopop ultimate bulletin board 2.01
• infopop ultimate bulletin board 2.02
• infopop ultimate bulletin board 2.03
• infopop ultimate bulletin board 2.04
• infopop ultimate bulletin board 2.05
• infopop ultimate bulletin board 2.10
• infopop ultimate bulletin board 2.11
• infopop ultimate bulletin board 3.0
• infopop ultimate bulletin board 3.01
• infopop ultimate bulletin board 3.02
• infopop ultimate bulletin board 3.5
• infopop ultimate bulletin board 3.6
• infopop ultimate bulletin board 3.7
• infopop ultimate bulletin board 3.75
• infopop ultimate bulletin board 4.0
• infopop ultimate bulletin board 4.01
• infopop ultimate bulletin board 4.02
• infopop ultimate bulletin board 4.03
• infopop ultimate bulletin board 4.04
• infopop ultimate bulletin board 4.05
• infopop ultimate bulletin board 4.06
• infopop ultimate bulletin board 4.07
• infopop ultimate bulletin board 4.50
• infopop ultimate bulletin board 4.51
• infopop ultimate bulletin board 4.52
• infopop ultimate bulletin board 4.53
• infopop ultimate bulletin board 4.75
• infopop ultimate bulletin board 4.80
• infopop ultimate bulletin board 4.81
• infopop ultimate bulletin board 4.82
• infopop ultimate bulletin board 4.83
• infopop ultimate bulletin board 4.84
• infopop ultimate bulletin board 4.85
• infopop ultimate bulletin board 4.86
• infopop ultimate bulletin board 5.00
• infopop ultimate bulletin board 5.01
• infopop ultimate bulletin board 5.02
• infopop ultimate bulletin board 5.05
• infopop ultimate bulletin board 5.06
• infopop ultimate bulletin board 5.07
• infopop ultimate bulletin board 5.08
• infopop ultimate bulletin board 5.09
• infopop ultimate bulletin board 5.10
• infopop ultimate bulletin board 5.11
• infopop ultimate bulletin board 5.12
• infopop ultimate bulletin board 5.13
• infopop ultimate bulletin board 5.14
• infopop ultimate bulletin board 5.15
• infopop ultimate bulletin board 5.16
• infopop ultimate bulletin board 5.17
• infopop ultimate bulletin board 5.18
• infopop ultimate bulletin board 5.19
• infopop ultimate bulletin board 5.20
• infopop ultimate bulletin board 5.25
• infopop ultimate bulletin board 5.26
• infopop ultimate bulletin board 5.27
• infopop ultimate bulletin board 5.28
… and 19 more
References
- http://marc.info/?l=bugtraq&m=100586033530341&w=2 Mailing List
- http://marc.info/?l=bugtraq&m=100586541317940&w=2 Mailing List
- http://marc.info/?l=bugtraq&m=100586033530341&w=2 Mailing List
- http://marc.info/?l=bugtraq&m=100586541317940&w=2 Mailing List