CVE-2005-2060 Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubbcentral ubb.threads | = 6.0 | No fix listed |
| ubbcentral ubb.threads | = 6.0.1 | No fix listed |
| ubbcentral ubb.threads | = 6.0.2 | No fix listed |
| ubbcentral ubb.threads | = 6.0.3 | No fix listed |
| ubbcentral ubb.threads | = 6.1 | No fix listed |
| ubbcentral ubb.threads | = 6.1.1 | No fix listed |
| ubbcentral ubb.threads | = 6.2 | No fix listed |
| ubbcentral ubb.threads | = 6.2.1 | No fix listed |
| ubbcentral ubb.threads | = 6.2.2 | No fix listed |
| ubbcentral ubb.threads | = 6.2.3 | No fix listed |
| ubbcentral ubb.threads | = 6.3 | No fix listed |
| ubbcentral ubb.threads | = 6.3.1 | No fix listed |
| ubbcentral ubb.threads | = 6.4 | No fix listed |
| ubbcentral ubb.threads | = 6.4.1 | No fix listed |
| ubbcentral ubb.threads | = 6.4.2 | No fix listed |
| ubbcentral ubb.threads | = 6.4.3 | No fix listed |
| ubbcentral ubb.threads | = 6.4.4 | No fix listed |
| ubbcentral ubb.threads | = 6.5 | No fix listed |
| ubbcentral ubb.threads | = 6.5.1 | No fix listed |
| ubbcentral ubb.threads | = 6.5.1.1 | No fix listed |
References
- 20050624 Infopop UBB Threads Multiple Vulnerabilities mailing-list
- www.gulftech.org patch vendor-advisory
- www.ubbcentral.com patch