Vulnerability in Ubbcentral Ubb.threads
CVE-2005-2060
Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter.
EPSS: 0.013 (68.3th percentile) — read the EPSS interpretation.
Affected products
- Ubbcentral Ubb.threads — versions 6.0, 6.0.1, 6.0.2
- N/a — versions n/a
References
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)