CVE-2002-0118

Published: Mar 25, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.

Affected (9)

Products: Infopop: Ultimate Bulletin Board

Infopop

1 product

Ultimate Bulletin Board

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Infopop Ultimate Bulletin Board	Version 5.4.7e
Infopop Ultimate Bulletin Board	Version 5.43
Infopop Ultimate Bulletin Board	Version 6.0.1
Infopop Ultimate Bulletin Board	Version 6.0.2
Infopop Ultimate Bulletin Board	Version 6.0.3
Infopop Ultimate Bulletin Board	Version 6.0.4f
Infopop Ultimate Bulletin Board	Version 6.0
Infopop Ultimate Bulletin Board	Version 6.0beta
Infopop Ultimate Bulletin Board	Version 6.2.0_beta_release_1.0