Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ultimate_bulletin_board | Infopop | - (including) | - (including) |
| Ultimate_bulletin_board | Infopop | 1.0 (including) | 1.0 (including) |
| Ultimate_bulletin_board | Infopop | 2.0 (including) | 2.0 (including) |
| Ultimate_bulletin_board | Infopop | 2.01 (including) | 2.01 (including) |
| Ultimate_bulletin_board | Infopop | 2.02 (including) | 2.02 (including) |
| Ultimate_bulletin_board | Infopop | 2.03 (including) | 2.03 (including) |
| Ultimate_bulletin_board | Infopop | 2.04 (including) | 2.04 (including) |
| Ultimate_bulletin_board | Infopop | 2.05 (including) | 2.05 (including) |
| Ultimate_bulletin_board | Infopop | 2.10 (including) | 2.10 (including) |
| Ultimate_bulletin_board | Infopop | 2.11 (including) | 2.11 (including) |
| Ultimate_bulletin_board | Infopop | 3.0 (including) | 3.0 (including) |
| Ultimate_bulletin_board | Infopop | 3.01 (including) | 3.01 (including) |
| Ultimate_bulletin_board | Infopop | 3.02 (including) | 3.02 (including) |
| Ultimate_bulletin_board | Infopop | 3.5 (including) | 3.5 (including) |
| Ultimate_bulletin_board | Infopop | 3.6 (including) | 3.6 (including) |
| Ultimate_bulletin_board | Infopop | 3.7 (including) | 3.7 (including) |
| Ultimate_bulletin_board | Infopop | 3.75 (including) | 3.75 (including) |
| Ultimate_bulletin_board | Infopop | 4.0 (including) | 4.0 (including) |
| Ultimate_bulletin_board | Infopop | 4.01 (including) | 4.01 (including) |
| Ultimate_bulletin_board | Infopop | 4.02 (including) | 4.02 (including) |
| Ultimate_bulletin_board | Infopop | 4.03 (including) | 4.03 (including) |
| Ultimate_bulletin_board | Infopop | 4.04 (including) | 4.04 (including) |
| Ultimate_bulletin_board | Infopop | 4.05 (including) | 4.05 (including) |
| Ultimate_bulletin_board | Infopop | 4.06 (including) | 4.06 (including) |
| Ultimate_bulletin_board | Infopop | 4.07 (including) | 4.07 (including) |
| Ultimate_bulletin_board | Infopop | 4.50 (including) | 4.50 (including) |
| Ultimate_bulletin_board | Infopop | 4.51 (including) | 4.51 (including) |
| Ultimate_bulletin_board | Infopop | 4.52 (including) | 4.52 (including) |
| Ultimate_bulletin_board | Infopop | 4.53 (including) | 4.53 (including) |
| Ultimate_bulletin_board | Infopop | 4.75 (including) | 4.75 (including) |
| Ultimate_bulletin_board | Infopop | 4.80 (including) | 4.80 (including) |
| Ultimate_bulletin_board | Infopop | 4.81 (including) | 4.81 (including) |
| Ultimate_bulletin_board | Infopop | 4.82 (including) | 4.82 (including) |
| Ultimate_bulletin_board | Infopop | 4.83 (including) | 4.83 (including) |
| Ultimate_bulletin_board | Infopop | 4.84 (including) | 4.84 (including) |
| Ultimate_bulletin_board | Infopop | 4.85 (including) | 4.85 (including) |
| Ultimate_bulletin_board | Infopop | 4.86 (including) | 4.86 (including) |
| Ultimate_bulletin_board | Infopop | 5.00 (including) | 5.00 (including) |
| Ultimate_bulletin_board | Infopop | 5.01 (including) | 5.01 (including) |
| Ultimate_bulletin_board | Infopop | 5.02 (including) | 5.02 (including) |
| Ultimate_bulletin_board | Infopop | 5.05 (including) | 5.05 (including) |
| Ultimate_bulletin_board | Infopop | 5.05-a (including) | 5.05-a (including) |
| Ultimate_bulletin_board | Infopop | 5.06 (including) | 5.06 (including) |
| Ultimate_bulletin_board | Infopop | 5.06-a (including) | 5.06-a (including) |
| Ultimate_bulletin_board | Infopop | 5.07 (including) | 5.07 (including) |
| Ultimate_bulletin_board | Infopop | 5.08 (including) | 5.08 (including) |
| Ultimate_bulletin_board | Infopop | 5.09 (including) | 5.09 (including) |
| Ultimate_bulletin_board | Infopop | 5.10 (including) | 5.10 (including) |
| Ultimate_bulletin_board | Infopop | 5.11 (including) | 5.11 (including) |
| Ultimate_bulletin_board | Infopop | 5.12 (including) | 5.12 (including) |
| Ultimate_bulletin_board | Infopop | 5.13 (including) | 5.13 (including) |
| Ultimate_bulletin_board | Infopop | 5.14 (including) | 5.14 (including) |
| Ultimate_bulletin_board | Infopop | 5.15 (including) | 5.15 (including) |
| Ultimate_bulletin_board | Infopop | 5.16 (including) | 5.16 (including) |
| Ultimate_bulletin_board | Infopop | 5.17 (including) | 5.17 (including) |
| Ultimate_bulletin_board | Infopop | 5.18 (including) | 5.18 (including) |
| Ultimate_bulletin_board | Infopop | 5.19 (including) | 5.19 (including) |
| Ultimate_bulletin_board | Infopop | 5.20 (including) | 5.20 (including) |
| Ultimate_bulletin_board | Infopop | 5.25 (including) | 5.25 (including) |
| Ultimate_bulletin_board | Infopop | 5.26 (including) | 5.26 (including) |
| Ultimate_bulletin_board | Infopop | 5.27 (including) | 5.27 (including) |
| Ultimate_bulletin_board | Infopop | 5.28 (including) | 5.28 (including) |
| Ultimate_bulletin_board | Infopop | 5.29 (including) | 5.29 (including) |
| Ultimate_bulletin_board | Infopop | 5.29-a (including) | 5.29-a (including) |
| Ultimate_bulletin_board | Infopop | 5.29-b (including) | 5.29-b (including) |
| Ultimate_bulletin_board | Infopop | 5.30 (including) | 5.30 (including) |
| Ultimate_bulletin_board | Infopop | 5.30-a (including) | 5.30-a (including) |
| Ultimate_bulletin_board | Infopop | 5.31 (including) | 5.31 (including) |
| Ultimate_bulletin_board | Infopop | 5.32 (including) | 5.32 (including) |
| Ultimate_bulletin_board | Infopop | 5.33 (including) | 5.33 (including) |
| Ultimate_bulletin_board | Infopop | 5.34 (including) | 5.34 (including) |
| Ultimate_bulletin_board | Infopop | 5.34-a (including) | 5.34-a (including) |
| Ultimate_bulletin_board | Infopop | 5.35 (including) | 5.35 (including) |
| Ultimate_bulletin_board | Infopop | 5.36 (including) | 5.36 (including) |
| Ultimate_bulletin_board | Infopop | 5.36-a (including) | 5.36-a (including) |
| Ultimate_bulletin_board | Infopop | 5.37 (including) | 5.37 (including) |
| Ultimate_bulletin_board | Infopop | 5.38 (including) | 5.38 (including) |
| Ultimate_bulletin_board | Infopop | 5.38-a (including) | 5.38-a (including) |
| Ultimate_bulletin_board | Infopop | 5.38-b (including) | 5.38-b (including) |
| Ultimate_bulletin_board | Infopop | 5.38-c (including) | 5.38-c (including) |
| Ultimate_bulletin_board | Infopop | 5.38-d (including) | 5.38-d (including) |
| Ultimate_bulletin_board | Infopop | 5.39 (including) | 5.39 (including) |
| Ultimate_bulletin_board | Infopop | 5.39-a (including) | 5.39-a (including) |
| Ultimate_bulletin_board | Infopop | 5.39-b (including) | 5.39-b (including) |
| Ultimate_bulletin_board | Infopop | 5.39-c (including) | 5.39-c (including) |
| Ultimate_bulletin_board | Infopop | 5.40 (including) | 5.40 (including) |
| Ultimate_bulletin_board | Infopop | 5.41 (including) | 5.41 (including) |
| Ultimate_bulletin_board | Infopop | 5.41-a (including) | 5.41-a (including) |
| Ultimate_bulletin_board | Infopop | 5.41-b (including) | 5.41-b (including) |
| Ultimate_bulletin_board | Infopop | 5.42 (including) | 5.42 (including) |
| Ultimate_bulletin_board | Infopop | 5.42-a (including) | 5.42-a (including) |
| Ultimate_bulletin_board | Infopop | 5.43 (including) | 5.43 (including) |
| Ultimate_bulletin_board | Infopop | 5.43-a (including) | 5.43-a (including) |
| Ultimate_bulletin_board | Infopop | 5.43-b (including) | 5.43-b (including) |
| Ultimate_bulletin_board | Infopop | 5.43-c (including) | 5.43-c (including) |
| Ultimate_bulletin_board | Infopop | 5.43-d (including) | 5.43-d (including) |
| Ultimate_bulletin_board | Infopop | 5.44 (including) | 5.44 (including) |
| Ultimate_bulletin_board | Infopop | 5.44-a (including) | 5.44-a (including) |
| Ultimate_bulletin_board | Infopop | 5.44-b (including) | 5.44-b (including) |
| Ultimate_bulletin_board | Infopop | 5.45 (including) | 5.45 (including) |
| Ultimate_bulletin_board | Infopop | 5.45-a (including) | 5.45-a (including) |
| Ultimate_bulletin_board | Infopop | 5.45-b (including) | 5.45-b (including) |
| Ultimate_bulletin_board | Infopop | 5.45-c (including) | 5.45-c (including) |
| Ultimate_bulletin_board | Infopop | 5.46 (including) | 5.46 (including) |
| Ultimate_bulletin_board | Infopop | 5.46-a (including) | 5.46-a (including) |
| Ultimate_bulletin_board | Infopop | 5.47 (including) | 5.47 (including) |
| Ultimate_bulletin_board | Infopop | 5.47-a (including) | 5.47-a (including) |
| Ultimate_bulletin_board | Infopop | 5.47-b (including) | 5.47-b (including) |
| Ultimate_bulletin_board | Infopop | 5.47-c (including) | 5.47-c (including) |
| Ultimate_bulletin_board | Infopop | 5.47-d (including) | 5.47-d (including) |
References
- http://marc.info/?l=bugtraq\u0026m=100586033530341\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=100586541317940\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=100586033530341\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=100586541317940\u0026w=2