Infopop Ultimate Bulletin Board — known CVE vulnerabilities

Every CVE whose affected-product data names Infopop Ultimate Bulletin Board, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2000-0141 — CVSS 10.0 (critical): Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
• CVE-2005-1199 — CVSS 7.5 (high): SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main…
• CVE-2002-0118 — CVSS 7.5 (high): Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute…
• CVE-2002-0223 — CVSS 7.5 (high): Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by…
• CVE-2003-0587 — CVSS 6.9 (medium): Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute…
• CVE-2022-25091 — CVSS 5.3 (medium): Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by…
• CVE-2001-0897 — CVSS 5.0 (medium): Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via…
• CVE-1999-0854 — CVSS 5.0 (medium): Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the…