CVE-2000-0141 Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.

HighCVSS 10.0 EPSS 3.5%

Published: 2000-10-13 07:00
Updated: 2026-06-17 00:51
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.

Affected products

Product	Affected versions	Fixed in
infopop ultimate bulletin board	= 5.43	No fix listed

References

991 vdb-entry
20000225 FW: Important UBB News For Licensed Users mailing-list
20000211 perl-cgi hole in UltimateBB by Infopop Corp. mailing-list
www.ultimatebb.com url-repurposed

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.48% (percentile 89.3)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.