CVE-2004-2509

2005-10-2504:00:00

mitre

www.cve.org

6.1 Medium

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.1%

JSON

Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML via the Cat parameter.

References

archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html

secunia.com/advisories/13452

securitytracker.com/id?1012503

www.osvdb.org/12365

www.osvdb.org/12366

www.osvdb.org/12367

www.securityfocus.com/bid/11900

exchange.xforce.ibmcloud.com/vulnerabilities/18432