IN
Vendor
Infopop
2 products with CVEs on record
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2022-25091
UB
Ultimate Bulletin Board
Infopop
5.3
1%
Apr 27Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by unauthenticated users via the quote reply feature
CVE-2005-1199
UB
Ultimate Bulletin Board
Infopop
–
1%
May 2SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter
CVE-2003-1278
OP
Opentopic
Infopop
–
4%
Dec 31Cross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other users and possibly steal authentication information via…
CVE-2003-0587
UB
Ultimate Bulletin Board
Infopop
–
1%
Aug 18Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web script and gain administrative…
CVE-2002-0223
UB
Ultimate Bulletin Board
Infopop
–
2%
May 16Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted…
CVE-2002-0118
UB
Ultimate Bulletin Board
Infopop
–
7%
Mar 25Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a…
CVE-2001-0897
UB
Ultimate Bulletin Board
Infopop
–
2%
Nov 15Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about:…
CVE-2000-0141
UB
Ultimate Bulletin Board
Infopop
–
3%
Feb 11Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field
CVE-1999-0854
UB
Ultimate Bulletin Board
Infopop
–
1%
Nov 1Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file