4.3

CVE-2006-2755

Exploit
Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ubbcentral ≫ Ubb.Threads Version 5.0
Ubbcentral ≫ Ubb.Threads Version 5.5.1
Ubbcentral ≫ Ubb.Threads Version 6.0
Ubbcentral ≫ Ubb.Threads Version 6.0.1
Ubbcentral ≫ Ubb.Threads Version 6.0.2
Ubbcentral ≫ Ubb.Threads Version 6.0.3
Ubbcentral ≫ Ubb.Threads Version 6.1
Ubbcentral ≫ Ubb.Threads Version 6.1.1
Ubbcentral ≫ Ubb.Threads Version 6.2
Ubbcentral ≫ Ubb.Threads Version 6.2.1
Ubbcentral ≫ Ubb.Threads Version 6.2.2
Ubbcentral ≫ Ubb.Threads Version 6.2.3
Ubbcentral ≫ Ubb.Threads Version 6.3
Ubbcentral ≫ Ubb.Threads Version 6.3.1
Ubbcentral ≫ Ubb.Threads Version 6.4
Ubbcentral ≫ Ubb.Threads Version 6.4.1
Ubbcentral ≫ Ubb.Threads Version 6.4.2
Ubbcentral ≫ Ubb.Threads Version 6.4.3
Ubbcentral ≫ Ubb.Threads Version 6.4.4
Ubbcentral ≫ Ubb.Threads Version 6.5
Ubbcentral ≫ Ubb.Threads Version 6.5.1
Ubbcentral ≫ Ubb.Threads Version 6.5.1.1
Ubbcentral ≫ Ubb.Threads Version 6.5.2
Ubbcentral ≫ Ubb.Threads Version 6.5.2_beta2
Ubbcentral ≫ Ubb.Threads Version 6.5.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.3% 0.811
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/435288/100/0/threaded
http://securityreason.com/securityalert/1007
http://www.nukedx.com/?viewdoc=40
Exploit
http://www.securityfocus.com/archive/1/435296/100/0/threaded
http://www.securityfocus.com/bid/18152
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/26870