Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ultimate_bulletin_board | Infopop | 5.43 (including) | 5.43 (including) |
References
- http://www.securityfocus.com/bid/991
- http://www.securityfocus.com/templates/archive.pike?list=1\u0026date=2000-02-22\u0026msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl
- http://www.securityfocus.com/templates/archive.pike?list=1\u0026date=2000-02-8\u0026msg=20000211224935.A13236%40infomag.ape.relarn.ru
- http://www.ultimatebb.com/home/versions.shtml
- http://www.securityfocus.com/bid/991
- http://www.securityfocus.com/templates/archive.pike?list=1\u0026date=2000-02-22\u0026msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl
- http://www.securityfocus.com/templates/archive.pike?list=1\u0026date=2000-02-8\u0026msg=20000211224935.A13236%40infomag.ape.relarn.ru
- http://www.ultimatebb.com/home/versions.shtml