Vulnerability in Ubbcentral Ubb.threads
CVE-2005-2061
Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include arbitrary files via the language parameter in a cookie followed by a null (%00) byte.
EPSS: 0.013 (68.3th percentile) — read the EPSS interpretation.
Affected products
- Ubbcentral Ubb.threads — versions 6.0, 6.0.1, 6.0.2
- N/a — versions n/a
References
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)