Vulnerabilities > CVE-2004-2510 - Cross-Site Scripting vulnerability in UBBCentral UBB.threads
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter.
Vulnerable Configurations
Exploit-Db
| description | UBBCentral UBB.threads 6.2.3/6.5 showflat.php Cat Parameter XSS. CVE-2004-2510. Webapps exploit for php platform |
| id | EDB-ID:24824 |
| last seen | 2016-02-03 |
| modified | 2004-12-13 |
| published | 2004-12-13 |
| reporter | dw. and ms. |
| source | https://www.exploit-db.com/download/24824/ |
| title | UBBCentral UBB.threads 6.2.3/6.5 showflat.php Cat Parameter XSS |
Nessus
| NASL family | CGI abuses : XSS |
| NASL id | UBBTHREADS_XSS.NASL |
| description | There are various cross-site scripting issues in the remote version of this software. An attacker may exploit them to use the remote website to inject arbitrary HTML and script code into a user |
| last seen | 2020-06-01 |
| modified | 2020-06-02 |
| plugin id | 15951 |
| published | 2004-12-13 |
| reporter | This script is Copyright (C) 2004-2018 Tenable Network Security, Inc. |
| source | https://www.tenable.com/plugins/nessus/15951 |
| title | UBB.threads < 6.5.1 Multiple XSS |