Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
CVE-2001-0897
CVE information
Published
Last Modified
CVSSv2.0 Severity
Impact Analysis
Description
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field..
CVSSv2.0 Score
- Severity
- Medium
- Base Score
- 5/10
- Exploit Score
- 10/10
- Access Vector
- Network
- Access Complexity
- Low
- Authentication Required
- None
- Impact Score
- 2.9/10
- Confidentiality Impact
- Partial
- Availability Impact
- None
- Integrity Impact
- None
Products Affected
| CPE | Affected | Vulnerable | Excluding | Edit |
|---|---|---|---|---|
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.07:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:2.11:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:3.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:3.01:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:3.02:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:3.5:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:3.6:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:3.7:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:3.75:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.01:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.02:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.03:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.04:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.05:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.06:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.07:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.50:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.51:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.52:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.53:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.75:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.80:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.81:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.82:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.83:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.84:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.85:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:4.86:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.00:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.01:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.02:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.05:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.05:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:2.10:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:2.05:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:2.04:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:2.03:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:2.02:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:2.01:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:2.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:1.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:-:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.06:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.06:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.08:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.09:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.10:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.11:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.12:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.13:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.14:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.15:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.16:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.17:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.18:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.19:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.20:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.25:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.26:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.27:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.28:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:b:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.30:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.30:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.31:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.32:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.33:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.34:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.34:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.35:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.36:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.36:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.37:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:b:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:c:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:d:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:b:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:c:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.40:*:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:b:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.42:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.42:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:b:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:c:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:d:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:b:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:b:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:c:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.46:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.46:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:-:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:a:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:b:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:c:*:*:*:*:*:* |
Yes
|
- | - | |
| cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:d:*:*:*:*:*:* |
Yes
|
- | - |