Unscored CVE-2001-0897 EUVD-2001-0880GHSA-3v2h-3966-qxpq

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via …

Published Feb 2, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.

References

20011115 UBB vulnerablietis + about: using example mailing-list
20011115 Re: UBB vulnerablietis + about: using example mailing-list