Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=100586033530341&w=2 | Mailing List |
http://marc.info/?l=bugtraq&m=100586541317940&w=2 | Mailing List |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2001-11-15 05:00
Updated : 2023-05-16 11:09
NVD link : CVE-2001-0897
Mitre link : CVE-2001-0897
CVE.ORG link : CVE-2001-0897
JSON object : View
Products Affected
infopop
- ultimate_bulletin_board
CWE