5

CVE-2005-2060

Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ubbcentral ≫ Ubb.Threads Version 6.0
Ubbcentral ≫ Ubb.Threads Version 6.0.1
Ubbcentral ≫ Ubb.Threads Version 6.0.2
Ubbcentral ≫ Ubb.Threads Version 6.0.3
Ubbcentral ≫ Ubb.Threads Version 6.1
Ubbcentral ≫ Ubb.Threads Version 6.1.1
Ubbcentral ≫ Ubb.Threads Version 6.2
Ubbcentral ≫ Ubb.Threads Version 6.2.1
Ubbcentral ≫ Ubb.Threads Version 6.2.2
Ubbcentral ≫ Ubb.Threads Version 6.2.3
Ubbcentral ≫ Ubb.Threads Version 6.3
Ubbcentral ≫ Ubb.Threads Version 6.3.1
Ubbcentral ≫ Ubb.Threads Version 6.4
Ubbcentral ≫ Ubb.Threads Version 6.4.1
Ubbcentral ≫ Ubb.Threads Version 6.4.2
Ubbcentral ≫ Ubb.Threads Version 6.4.3
Ubbcentral ≫ Ubb.Threads Version 6.4.4
Ubbcentral ≫ Ubb.Threads Version 6.5
Ubbcentral ≫ Ubb.Threads Version 6.5.1
Ubbcentral ≫ Ubb.Threads Version 6.5.1.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.34% 0.68
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=111963737202040&w=2
http://www.gulftech.org/?node=research&article_id=00084-06232005
Patch
Vendor Advisory
http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351
Patch