Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include arbitrary files via the language parameter in a cookie followed by a null (%00) byte.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.0038
Percentile: 0.58642

CVSS Scoring

Affected Products

• cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*
• cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*

← Back to Home