CVE-2004-2509 in UBB.threads

Summary

Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML via the Cat parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

10/25/2005

Disclosure

12/31/2004

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-80

Exploit

Download

CVSS

4.3

EPSS

0.01380

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-2509
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-2509
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-2509/