CVE-2004-2509

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML via the Cat parameter.

Affected (2)

Products: Ubbcentral: Ubb.threads

Ubbcentral

1 product

Ubb.threads

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ubbcentral Ubb.threads	Version 6.2.3
Ubbcentral Ubb.threads	Version 6.5

References (16)

http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/13452

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1012503

Source: cve@mitre.org

Exploit

http://www.osvdb.org/12365

Source: cve@mitre.org

Patch

http://www.osvdb.org/12366

Source: cve@mitre.org

Patch

http://www.osvdb.org/12367

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/11900

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/18432

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html