Vulnerability Database

299,184

Total vulnerabilities in the database

CVE-2001-0897

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.

  • Published: Nov 15, 2001
  • Updated: Apr 13, 2023
  • CVE: CVE-2001-0897
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
infopop / ultimate_bulletin_board 5.07 5.07.x
infopop / ultimate_bulletin_board 2.11 2.11.x
infopop / ultimate_bulletin_board 3.0 3.0.x
infopop / ultimate_bulletin_board 3.01 3.01.x
infopop / ultimate_bulletin_board 3.02 3.02.x
infopop / ultimate_bulletin_board 3.5 3.5.x
infopop / ultimate_bulletin_board 3.6 3.6.x
infopop / ultimate_bulletin_board 3.7 3.7.x
infopop / ultimate_bulletin_board 3.75 3.75.x
infopop / ultimate_bulletin_board 4.0 4.0.x
infopop / ultimate_bulletin_board 4.01 4.01.x
infopop / ultimate_bulletin_board 4.02 4.02.x
infopop / ultimate_bulletin_board 4.03 4.03.x
infopop / ultimate_bulletin_board 4.04 4.04.x
infopop / ultimate_bulletin_board 4.05 4.05.x
infopop / ultimate_bulletin_board 4.06 4.06.x
infopop / ultimate_bulletin_board 4.07 4.07.x
infopop / ultimate_bulletin_board 4.50 4.50.x
infopop / ultimate_bulletin_board 4.51 4.51.x
infopop / ultimate_bulletin_board 4.52 4.52.x
infopop / ultimate_bulletin_board 4.53 4.53.x
infopop / ultimate_bulletin_board 4.75 4.75.x
infopop / ultimate_bulletin_board 4.80 4.80.x
infopop / ultimate_bulletin_board 4.81 4.81.x
infopop / ultimate_bulletin_board 4.82 4.82.x
infopop / ultimate_bulletin_board 4.83 4.83.x
infopop / ultimate_bulletin_board 4.84 4.84.x
infopop / ultimate_bulletin_board 4.85 4.85.x
infopop / ultimate_bulletin_board 4.86 4.86.x
infopop / ultimate_bulletin_board 5.00 5.00.x
infopop / ultimate_bulletin_board 5.01 5.01.x
infopop / ultimate_bulletin_board 5.02 5.02.x
infopop / ultimate_bulletin_board 5.05 5.05.x
infopop / ultimate_bulletin_board 5.05-a 5.05-a.x
infopop / ultimate_bulletin_board 2.10 2.10.x
infopop / ultimate_bulletin_board 2.05 2.05.x
infopop / ultimate_bulletin_board 2.04 2.04.x
infopop / ultimate_bulletin_board 2.03 2.03.x
infopop / ultimate_bulletin_board 2.02 2.02.x
infopop / ultimate_bulletin_board 2.01 2.01.x
infopop / ultimate_bulletin_board 2.0 2.0.x
infopop / ultimate_bulletin_board 1.0 1.0.x
infopop / ultimate_bulletin_board 5.06 5.06.x
infopop / ultimate_bulletin_board 5.06-a 5.06-a.x
infopop / ultimate_bulletin_board 5.08 5.08.x
infopop / ultimate_bulletin_board 5.09 5.09.x
infopop / ultimate_bulletin_board 5.10 5.10.x
infopop / ultimate_bulletin_board 5.11 5.11.x
infopop / ultimate_bulletin_board 5.12 5.12.x
infopop / ultimate_bulletin_board 5.13 5.13.x
infopop / ultimate_bulletin_board 5.14 5.14.x
infopop / ultimate_bulletin_board 5.15 5.15.x
infopop / ultimate_bulletin_board 5.16 5.16.x
infopop / ultimate_bulletin_board 5.17 5.17.x
infopop / ultimate_bulletin_board 5.18 5.18.x
infopop / ultimate_bulletin_board 5.19 5.19.x
infopop / ultimate_bulletin_board 5.20 5.20.x
infopop / ultimate_bulletin_board 5.25 5.25.x
infopop / ultimate_bulletin_board 5.26 5.26.x
infopop / ultimate_bulletin_board 5.27 5.27.x
infopop / ultimate_bulletin_board 5.28 5.28.x
infopop / ultimate_bulletin_board 5.29 5.29.x
infopop / ultimate_bulletin_board 5.29-a 5.29-a.x
infopop / ultimate_bulletin_board 5.29-b 5.29-b.x
infopop / ultimate_bulletin_board 5.30 5.30.x
infopop / ultimate_bulletin_board 5.30-a 5.30-a.x
infopop / ultimate_bulletin_board 5.31 5.31.x
infopop / ultimate_bulletin_board 5.32 5.32.x
infopop / ultimate_bulletin_board 5.33 5.33.x
infopop / ultimate_bulletin_board 5.34 5.34.x
infopop / ultimate_bulletin_board 5.34-a 5.34-a.x
infopop / ultimate_bulletin_board 5.35 5.35.x
infopop / ultimate_bulletin_board 5.36 5.36.x
infopop / ultimate_bulletin_board 5.36-a 5.36-a.x
infopop / ultimate_bulletin_board 5.37 5.37.x
infopop / ultimate_bulletin_board 5.38 5.38.x
infopop / ultimate_bulletin_board 5.38-a 5.38-a.x
infopop / ultimate_bulletin_board 5.38-b 5.38-b.x
infopop / ultimate_bulletin_board 5.38-c 5.38-c.x
infopop / ultimate_bulletin_board 5.38-d 5.38-d.x
infopop / ultimate_bulletin_board 5.39 5.39.x
infopop / ultimate_bulletin_board 5.39-a 5.39-a.x
infopop / ultimate_bulletin_board 5.39-b 5.39-b.x
infopop / ultimate_bulletin_board 5.39-c 5.39-c.x
infopop / ultimate_bulletin_board 5.40 5.40.x
infopop / ultimate_bulletin_board 5.41 5.41.x
infopop / ultimate_bulletin_board 5.41-a 5.41-a.x
infopop / ultimate_bulletin_board 5.41-b 5.41-b.x
infopop / ultimate_bulletin_board 5.42 5.42.x
infopop / ultimate_bulletin_board 5.42-a 5.42-a.x
infopop / ultimate_bulletin_board 5.43 5.43.x
infopop / ultimate_bulletin_board 5.43-a 5.43-a.x
infopop / ultimate_bulletin_board 5.43-b 5.43-b.x
infopop / ultimate_bulletin_board 5.43-c 5.43-c.x
infopop / ultimate_bulletin_board 5.43-d 5.43-d.x
infopop / ultimate_bulletin_board 5.44 5.44.x
infopop / ultimate_bulletin_board 5.44-a 5.44-a.x
infopop / ultimate_bulletin_board 5.44-b 5.44-b.x
infopop / ultimate_bulletin_board 5.45 5.45.x
infopop / ultimate_bulletin_board 5.45-a 5.45-a.x
infopop / ultimate_bulletin_board 5.45-b 5.45-b.x
infopop / ultimate_bulletin_board 5.45-c 5.45-c.x
infopop / ultimate_bulletin_board 5.46 5.46.x
infopop / ultimate_bulletin_board 5.46-a 5.46-a.x
infopop / ultimate_bulletin_board 5.47 5.47.x
infopop / ultimate_bulletin_board 5.47-a 5.47-a.x
infopop / ultimate_bulletin_board 5.47-b 5.47-b.x
infopop / ultimate_bulletin_board 5.47-c 5.47-c.x
infopop / ultimate_bulletin_board 5.47-d 5.47-d.x