Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=100586033530341&w=2 | Mailing List |
http://marc.info/?l=bugtraq&m=100586541317940&w=2 | Mailing List |
http://marc.info/?l=bugtraq&m=100586033530341&w=2 | Mailing List |
http://marc.info/?l=bugtraq&m=100586541317940&w=2 | Mailing List |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:36
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=100586033530341&w=2 - Mailing List | |
References | () http://marc.info/?l=bugtraq&m=100586541317940&w=2 - Mailing List |
Information
Published : 2001-11-15 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2001-0897
Mitre link : CVE-2001-0897
CVE.ORG link : CVE-2001-0897
JSON object : View
Products Affected
infopop
- ultimate_bulletin_board
CWE