Browse CVEs

MEDIUM 5.3 CVE-2022-25091 Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by unauthenticated use… Ultimate Bulletin Board after 5.47a Fix from $1,6002023-04-27 HIGH 7.5 CVE-2005-1199 SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter. Ultimate Bulletin Board Patch available Fix from $1,9502005-05-02 MEDIUM 6.9 CVE-2003-0587 Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web scri… Ultimate Bulletin Board Mitigation only Fix from $1,6002003-08-18 HIGH 7.5 CVE-2002-0223 Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filena… Ultimate Bulletin Board Patch available Fix from $1,9502002-05-16 HIGH 7.5 CVE-2002-0118EPSS 7% Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary scrip… Ultimate Bulletin Board Patch available Fix from $1,9502002-03-25 MEDIUM 5.0 CVE-2001-0897 Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] t… Ultimate Bulletin Board Mitigation only Fix from $1,6002001-11-15 HIGH 10.0 CVE-2000-0141 Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field. Ultimate Bulletin Board Mitigation only Fix from $1,9502000-02-11 MEDIUM 5.0 CVE-1999-0854 Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP serve… Ultimate Bulletin Board Mitigation only Fix from $1,6001999-11-01