CVE-2005-2059 Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow r...
MediumCVSS 6.5
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to modify settings as another user via a link or IMG tag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubbcentral ubb.threads | <= 6.5.1.1 | No fix listed |
References
- 20050624 Infopop UBB Threads Multiple Vulnerabilities exploit mailing-list
- www.gulftech.org broken-link exploit patch vendor-advisory
- www.ubbcentral.com broken-link patch