Cross site scripting

2012-09-2317:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.6%

JSON

Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter.

CPENameOperatorVersion
ubb.threadseq5.5.1
ubb.threadseq6.5
ubb.threadseq6.5.1
ubb.threadseq7.5
ubb.threadseq7.5.1
ubb.threadseq7.3.1
ubb.threadseq6.1
ubb.threadseq6.2.1
ubb.threadseq6.0.1
ubb.threadseq6.4.4

Name	Operator	Version
ubb.threads	eq	5.5.1
ubb.threads	eq	6.5
ubb.threads	eq	6.5.1
ubb.threads	eq	7.5
ubb.threads	eq	7.5.1
ubb.threads	eq	7.3.1
ubb.threads	eq	6.1
ubb.threads	eq	6.2.1
ubb.threads	eq	6.0.1
ubb.threads	eq	6.4.4

Rows per page:

1-10 of 421

References

packetstormsecurity.org/files/108353/ubbforum-xss.txt

secunia.com/advisories/47452

www.osvdb.org/78192

www.securityfocus.com/bid/51275

exchange.xforce.ibmcloud.com/vulnerabilities/72147

st2tea.blogspot.com/2012/01/ubb-forum756-cross-site-scripting.html