Vulnerability in Infopop Ultimate Bulletin Board

CVE-2001-0897

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.

EPSS: 0.019 (77.9th percentile) — read the EPSS interpretation.

Affected products

Infopop Ultimate_bulletin_board — versions 1.0, 2.0, 2.01
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List)