Vulnerabilities > CVE-2004-2510 - Unspecified vulnerability in Ubbcentral Ubb.Threads

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ubbcentral
nessus
exploit available

Summary

Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter.

Exploit-Db

descriptionUBBCentral UBB.threads 6.2.3/6.5 showflat.php Cat Parameter XSS. CVE-2004-2510. Webapps exploit for php platform
idEDB-ID:24824
last seen2016-02-03
modified2004-12-13
published2004-12-13
reporterdw. and ms.
sourcehttps://www.exploit-db.com/download/24824/
titleUBBCentral UBB.threads 6.2.3/6.5 showflat.php Cat Parameter XSS

Nessus

NASL familyCGI abuses : XSS
NASL idUBBTHREADS_XSS.NASL
descriptionThere are various cross-site scripting issues in the remote version of this software. An attacker may exploit them to use the remote website to inject arbitrary HTML and script code into a user
last seen2020-06-01
modified2020-06-02
plugin id15951
published2004-12-13
reporterThis script is Copyright (C) 2004-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/15951
titleUBB.threads < 6.5.1 Multiple XSS