Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by unauthenticated users via the quote reply feature.
References
| Link | Resource |
|---|---|
| http://www.infopop.com/support/ubbclassic/version5.html | Broken Link |
| https://marc.info/?l=vuln-dev&m=97486849231786&w=2 | Mailing List |
| https://vulners.com/securityvulns/SECURITYVULNS:DOC:954 | Mailing List |
| https://web.archive.org/web/20030207100935/ | Not Applicable |
| https://web.archive.org/web/20030207100935/http://www.infopop.com/support/ubbclassic/version5.html | Release Notes |
Configurations
History
05 May 2023, 18:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://marc.info/?l=vuln-dev&m=97486849231786&w=2 - Mailing List | |
| References | (MISC) https://vulners.com/securityvulns/SECURITYVULNS:DOC:954 - Mailing List | |
| References | (MISC) http://www.infopop.com/support/ubbclassic/version5.html - Broken Link | |
| References | (MISC) https://web.archive.org/web/20030207100935/http://www.infopop.com/support/ubbclassic/version5.html - Release Notes | |
| References | (MISC) https://web.archive.org/web/20030207100935/ - Not Applicable | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CPE | cpe:2.3:a:infopop:ultimate_bulletin_board:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo |
27 Apr 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-27 21:15
Updated : 2024-02-04 23:37
NVD link : CVE-2022-25091
Mitre link : CVE-2022-25091
CVE.ORG link : CVE-2022-25091
JSON object : View
Products Affected
infopop
- ultimate_bulletin_board
CWE