Vulnerabilities > CVE-2005-2060 - Remote Security vulnerability in UBB.threads
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter.
Vulnerable Configurations
Nessus
NASL family | CGI abuses |
NASL id | UBBTHREADS_PRINTTHREAD_SQL_INJECTION.NASL |
description | The remote host is running a version of UBB.threads that suffers from multiple vulnerabilities due to insufficient input validation - local file inclusion, HTTP response splitting, SQL injection, and cross-site scripting. These flaws may allow an attacker to completely compromise the affected installation of UBB.threads. |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 18098 |
published | 2005-04-20 |
reporter | This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/18098 |
title | UBB.threads < 6.5.2 beta Multiple Vulnerabilities |