medium5.0
CVE-2001-0897
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that re…
Impact
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infopop | Ultimate Bulletin Board | All versions Versions 1.0, 2.0, 2.01, 2.02, 2.03 |