NetSight
IP …
medium5.0

CVE-2005-2061

Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include arbitrary files via the language parameter in a cookie followed by a null (%00) byte.

Impact

Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include arbitrary files via the language parameter in a cookie followed by a null (%00) byte.

Affected products

VendorProductAffected versions
UbbcentralUbb.Threads
Versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.1, 6.1.1

References