← Back

CVE-2005-2059

nvd nist
Published: Jun 29, 2005Modified: Apr 16, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to modify settings as another user via a link or IMG tag.

Affected (1)

Ubbcentral
1 product
Ubb.threads
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ubb.threads
Up to 6.5.1.1

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (6)

Source: cve@mitre.org
ExploitMailing List
Source: cve@mitre.org
Broken LinkExploitPatchVendor Advisory
Source: cve@mitre.org
Broken LinkPatch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatch

Timeline

No history available yet.