Infopop

9 CVEs across 2 Infopop products. Browse Infopop vulnerabilities, severities, and proof-of-concept exploits.

Infopop products with known CVEs

ProductCVEs
Ultimate Bulletin Board8
Opentopic1
Infopop CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-25091Medium5.32023-04-27Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by unauthenticated users via the…
CVE-2005-11992005-05-02SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter.
CVE-2003-12782003-12-31Cross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other users and possibly steal authenticatio…
CVE-2003-05872003-08-18Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web script and gai…
CVE-2002-02232002-05-16Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that co…
CVE-2002-01182002-03-25Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and stea…
CVE-2001-08972001-11-15Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that re…
CVE-2000-01412000-02-11Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
CVE-1999-08541999-11-01Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts…