CVE-2012-5104 Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter.
MediumCVSS 4.3
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubbcentral ubb.threads | All versions | No fix listed |
| ubbcentral ubb.threads | <= 7.5.6 | No fix listed |
| ubbcentral ubb.threads | = 3.4 | No fix listed |
| ubbcentral ubb.threads | = 3.5 | No fix listed |
| ubbcentral ubb.threads | = 5.0 | No fix listed |
| ubbcentral ubb.threads | = 5.5.1 | No fix listed |
| ubbcentral ubb.threads | = 6.0 | No fix listed |
| ubbcentral ubb.threads | = 6.0.1 | No fix listed |
| ubbcentral ubb.threads | = 6.0.2 | No fix listed |
| ubbcentral ubb.threads | = 6.0.3 | No fix listed |
| ubbcentral ubb.threads | = 6.1 | No fix listed |
| ubbcentral ubb.threads | = 6.1.1 | No fix listed |
| ubbcentral ubb.threads | = 6.2 | No fix listed |
| ubbcentral ubb.threads | = 6.2.1 | No fix listed |
| ubbcentral ubb.threads | = 6.2.2 | No fix listed |
| ubbcentral ubb.threads | = 6.2.3 | No fix listed |
| ubbcentral ubb.threads | = 6.3 | No fix listed |
| ubbcentral ubb.threads | = 6.3.1 | No fix listed |
| ubbcentral ubb.threads | = 6.4 | No fix listed |
| ubbcentral ubb.threads | = 6.4.1 | No fix listed |
| ubbcentral ubb.threads | = 6.4.2 | No fix listed |
| ubbcentral ubb.threads | = 6.4.3 | No fix listed |
| ubbcentral ubb.threads | = 6.4.4 | No fix listed |
| ubbcentral ubb.threads | = 6.5 | No fix listed |
| ubbcentral ubb.threads | = 6.5.1 | No fix listed |
Show 18 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ubbcentral ubb.threads | = 6.5.1.1 | No fix listed |
| ubbcentral ubb.threads | = 6.5.2 | No fix listed |
| ubbcentral ubb.threads | = 6.5.2_beta2 | No fix listed |
| ubbcentral ubb.threads | = 6.5.3 | No fix listed |
| ubbcentral ubb.threads | = 7.0 | No fix listed |
| ubbcentral ubb.threads | = 7.1 | No fix listed |
| ubbcentral ubb.threads | = 7.2 | No fix listed |
| ubbcentral ubb.threads | = 7.3.1 | No fix listed |
| ubbcentral ubb.threads | = 7.4 | No fix listed |
| ubbcentral ubb.threads | = 7.4.1 | No fix listed |
| ubbcentral ubb.threads | = 7.4.2 | No fix listed |
| ubbcentral ubb.threads | = 7.5 | No fix listed |
| ubbcentral ubb.threads | = 7.5.1 | No fix listed |
| ubbcentral ubb.threads | = 7.5.2 | No fix listed |
| ubbcentral ubb.threads | = 7.5.3 | No fix listed |
| ubbcentral ubb.threads | = 7.5.4 | No fix listed |
| ubbcentral ubb.threads | = 7.5.5 | No fix listed |
| ubbcentral ubb.threads | = 7.6 | No fix listed |
References
- packetstormsecurity.org exploit
- 47452 third-party-advisory vendor-advisory
- st2tea.blogspot.com exploit
- 78192 vdb-entry
- 51275 exploit vdb-entry
- ubbthreads-ubbthreads-xss(72147) vdb-entry