CVEvulnerability
CVE-2004-2509
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML via the Cat parameter.
Affected configurations
• ubbcentral ubb.threads 6.2.3
• ubbcentral ubb.threads 6.5
References
- http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html Exploit
- http://secunia.com/advisories/13452 Vendor Advisory
- http://securitytracker.com/id?1012503 Exploit
- http://www.osvdb.org/12365 Patch
- http://www.osvdb.org/12366 Patch
- http://www.osvdb.org/12367 Patch
- http://www.securityfocus.com/bid/11900 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18432 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html Exploit
- http://secunia.com/advisories/13452 Vendor Advisory
- http://securitytracker.com/id?1012503 Exploit
- http://www.osvdb.org/12365 Patch
- http://www.osvdb.org/12366 Patch
- http://www.osvdb.org/12367 Patch
- http://www.securityfocus.com/bid/11900 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18432 exchange.xforce.ibmcloud.com