Read the docs
TI-2001-00854 Aliases CVE-2001-0897GHSA-3v2h-3966-qxpq

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e…

Priority LOW 27Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.

Why it matters now

EPSS 0.01934 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 110

CPEVersionsRoleVendor
cpe:2.3:a:infopop:ultimate_bulletin_board:-:*:*:*:*:*:*:*not specified by NVDVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:1.0:*:*:*:*:*:*:*1.0VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:2.0:*:*:*:*:*:*:*2.0VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:2.01:*:*:*:*:*:*:*2.01VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:2.02:*:*:*:*:*:*:*2.02VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:2.03:*:*:*:*:*:*:*2.03VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:2.04:*:*:*:*:*:*:*2.04VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:2.05:*:*:*:*:*:*:*2.05VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:2.10:*:*:*:*:*:*:*2.10VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:2.11:*:*:*:*:*:*:*2.11VulnerableInfopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:2.01:*:*:*:*:*:*:* Versions 2.01 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:2.02:*:*:*:*:*:*:* Versions 2.02 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:2.03:*:*:*:*:*:*:* Versions 2.03 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:2.04:*:*:*:*:*:*:* Versions 2.04 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:2.05:*:*:*:*:*:*:* Versions 2.05 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:2.10:*:*:*:*:*:*:* Versions 2.10 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:2.11:*:*:*:*:*:*:* Versions 2.11 Vulnerable ·Infopop
Show 100 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:infopop:ultimate_bulletin_board:3.0:*:*:*:*:*:*:*3.0VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:3.01:*:*:*:*:*:*:*3.01VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:3.02:*:*:*:*:*:*:*3.02VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:3.5:*:*:*:*:*:*:*3.5VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:3.6:*:*:*:*:*:*:*3.6VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:3.7:*:*:*:*:*:*:*3.7VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:3.75:*:*:*:*:*:*:*3.75VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.0:*:*:*:*:*:*:*4.0VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.01:*:*:*:*:*:*:*4.01VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.02:*:*:*:*:*:*:*4.02VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.03:*:*:*:*:*:*:*4.03VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.04:*:*:*:*:*:*:*4.04VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.05:*:*:*:*:*:*:*4.05VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.06:*:*:*:*:*:*:*4.06VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.07:*:*:*:*:*:*:*4.07VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.50:*:*:*:*:*:*:*4.50VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.51:*:*:*:*:*:*:*4.51VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.52:*:*:*:*:*:*:*4.52VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.53:*:*:*:*:*:*:*4.53VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.75:*:*:*:*:*:*:*4.75VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.80:*:*:*:*:*:*:*4.80VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.81:*:*:*:*:*:*:*4.81VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.82:*:*:*:*:*:*:*4.82VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.83:*:*:*:*:*:*:*4.83VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.84:*:*:*:*:*:*:*4.84VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.85:*:*:*:*:*:*:*4.85VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:4.86:*:*:*:*:*:*:*4.86VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.00:*:*:*:*:*:*:*5.00VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.01:*:*:*:*:*:*:*5.01VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.02:*:*:*:*:*:*:*5.02VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.05:-:*:*:*:*:*:*5.05VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.05:a:*:*:*:*:*:*5.05 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.06:-:*:*:*:*:*:*5.06VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.06:a:*:*:*:*:*:*5.06 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.07:*:*:*:*:*:*:*5.07VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.08:*:*:*:*:*:*:*5.08VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.09:*:*:*:*:*:*:*5.09VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.10:*:*:*:*:*:*:*5.10VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.11:*:*:*:*:*:*:*5.11VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.12:*:*:*:*:*:*:*5.12VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.13:*:*:*:*:*:*:*5.13VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.14:*:*:*:*:*:*:*5.14VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.15:*:*:*:*:*:*:*5.15VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.16:*:*:*:*:*:*:*5.16VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.17:*:*:*:*:*:*:*5.17VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.18:*:*:*:*:*:*:*5.18VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.19:*:*:*:*:*:*:*5.19VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.20:*:*:*:*:*:*:*5.20VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.25:*:*:*:*:*:*:*5.25VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.26:*:*:*:*:*:*:*5.26VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.27:*:*:*:*:*:*:*5.27VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.28:*:*:*:*:*:*:*5.28VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:-:*:*:*:*:*:*5.29VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:a:*:*:*:*:*:*5.29 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:b:*:*:*:*:*:*5.29 bVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.30:-:*:*:*:*:*:*5.30VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.30:a:*:*:*:*:*:*5.30 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.31:*:*:*:*:*:*:*5.31VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.32:*:*:*:*:*:*:*5.32VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.33:*:*:*:*:*:*:*5.33VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.34:-:*:*:*:*:*:*5.34VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.34:a:*:*:*:*:*:*5.34 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.35:*:*:*:*:*:*:*5.35VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.36:-:*:*:*:*:*:*5.36VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.36:a:*:*:*:*:*:*5.36 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.37:*:*:*:*:*:*:*5.37VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:-:*:*:*:*:*:*5.38VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:a:*:*:*:*:*:*5.38 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:b:*:*:*:*:*:*5.38 bVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:c:*:*:*:*:*:*5.38 cVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:d:*:*:*:*:*:*5.38 dVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:-:*:*:*:*:*:*5.39VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:a:*:*:*:*:*:*5.39 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:b:*:*:*:*:*:*5.39 bVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:c:*:*:*:*:*:*5.39 cVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.40:*:*:*:*:*:*:*5.40VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:-:*:*:*:*:*:*5.41VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:a:*:*:*:*:*:*5.41 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:b:*:*:*:*:*:*5.41 bVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.42:-:*:*:*:*:*:*5.42VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.42:a:*:*:*:*:*:*5.42 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:-:*:*:*:*:*:*5.43VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:a:*:*:*:*:*:*5.43 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:b:*:*:*:*:*:*5.43 bVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:c:*:*:*:*:*:*5.43 cVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:d:*:*:*:*:*:*5.43 dVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:-:*:*:*:*:*:*5.44VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:a:*:*:*:*:*:*5.44 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:b:*:*:*:*:*:*5.44 bVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:-:*:*:*:*:*:*5.45VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:a:*:*:*:*:*:*5.45 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:b:*:*:*:*:*:*5.45 bVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:c:*:*:*:*:*:*5.45 cVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.46:-:*:*:*:*:*:*5.46VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.46:a:*:*:*:*:*:*5.46 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:-:*:*:*:*:*:*5.47VulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:a:*:*:*:*:*:*5.47 aVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:b:*:*:*:*:*:*5.47 bVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:c:*:*:*:*:*:*5.47 cVulnerableInfopop
cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:d:*:*:*:*:*:*5.47 dVulnerableInfopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:3.01:*:*:*:*:*:*:* Versions 3.01 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:3.02:*:*:*:*:*:*:* Versions 3.02 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:3.6:*:*:*:*:*:*:* Versions 3.6 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:3.7:*:*:*:*:*:*:* Versions 3.7 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:3.75:*:*:*:*:*:*:* Versions 3.75 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.01:*:*:*:*:*:*:* Versions 4.01 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.02:*:*:*:*:*:*:* Versions 4.02 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.03:*:*:*:*:*:*:* Versions 4.03 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.04:*:*:*:*:*:*:* Versions 4.04 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.05:*:*:*:*:*:*:* Versions 4.05 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.06:*:*:*:*:*:*:* Versions 4.06 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.07:*:*:*:*:*:*:* Versions 4.07 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.50:*:*:*:*:*:*:* Versions 4.50 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.51:*:*:*:*:*:*:* Versions 4.51 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.52:*:*:*:*:*:*:* Versions 4.52 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.53:*:*:*:*:*:*:* Versions 4.53 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.75:*:*:*:*:*:*:* Versions 4.75 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.80:*:*:*:*:*:*:* Versions 4.80 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.81:*:*:*:*:*:*:* Versions 4.81 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.82:*:*:*:*:*:*:* Versions 4.82 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.83:*:*:*:*:*:*:* Versions 4.83 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.84:*:*:*:*:*:*:* Versions 4.84 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.85:*:*:*:*:*:*:* Versions 4.85 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:4.86:*:*:*:*:*:*:* Versions 4.86 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.00:*:*:*:*:*:*:* Versions 5.00 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.01:*:*:*:*:*:*:* Versions 5.01 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.02:*:*:*:*:*:*:* Versions 5.02 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.05:-:*:*:*:*:*:* Versions 5.05 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.05:a:*:*:*:*:*:* Versions 5.05 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.06:-:*:*:*:*:*:* Versions 5.06 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.06:a:*:*:*:*:*:* Versions 5.06 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.07:*:*:*:*:*:*:* Versions 5.07 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.08:*:*:*:*:*:*:* Versions 5.08 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.09:*:*:*:*:*:*:* Versions 5.09 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.10:*:*:*:*:*:*:* Versions 5.10 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.11:*:*:*:*:*:*:* Versions 5.11 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.12:*:*:*:*:*:*:* Versions 5.12 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.13:*:*:*:*:*:*:* Versions 5.13 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.14:*:*:*:*:*:*:* Versions 5.14 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.15:*:*:*:*:*:*:* Versions 5.15 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.16:*:*:*:*:*:*:* Versions 5.16 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.17:*:*:*:*:*:*:* Versions 5.17 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.18:*:*:*:*:*:*:* Versions 5.18 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.19:*:*:*:*:*:*:* Versions 5.19 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.20:*:*:*:*:*:*:* Versions 5.20 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.25:*:*:*:*:*:*:* Versions 5.25 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.26:*:*:*:*:*:*:* Versions 5.26 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.27:*:*:*:*:*:*:* Versions 5.27 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.28:*:*:*:*:*:*:* Versions 5.28 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:-:*:*:*:*:*:* Versions 5.29 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:a:*:*:*:*:*:* Versions 5.29 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:b:*:*:*:*:*:* Versions 5.29 b Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.30:-:*:*:*:*:*:* Versions 5.30 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.30:a:*:*:*:*:*:* Versions 5.30 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.31:*:*:*:*:*:*:* Versions 5.31 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.32:*:*:*:*:*:*:* Versions 5.32 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.33:*:*:*:*:*:*:* Versions 5.33 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.34:-:*:*:*:*:*:* Versions 5.34 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.34:a:*:*:*:*:*:* Versions 5.34 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.35:*:*:*:*:*:*:* Versions 5.35 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.36:-:*:*:*:*:*:* Versions 5.36 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.36:a:*:*:*:*:*:* Versions 5.36 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.37:*:*:*:*:*:*:* Versions 5.37 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:-:*:*:*:*:*:* Versions 5.38 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:a:*:*:*:*:*:* Versions 5.38 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:b:*:*:*:*:*:* Versions 5.38 b Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:c:*:*:*:*:*:* Versions 5.38 c Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:d:*:*:*:*:*:* Versions 5.38 d Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:-:*:*:*:*:*:* Versions 5.39 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:a:*:*:*:*:*:* Versions 5.39 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:b:*:*:*:*:*:* Versions 5.39 b Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:c:*:*:*:*:*:* Versions 5.39 c Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.40:*:*:*:*:*:*:* Versions 5.40 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:-:*:*:*:*:*:* Versions 5.41 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:a:*:*:*:*:*:* Versions 5.41 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:b:*:*:*:*:*:* Versions 5.41 b Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.42:-:*:*:*:*:*:* Versions 5.42 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.42:a:*:*:*:*:*:* Versions 5.42 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:-:*:*:*:*:*:* Versions 5.43 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:a:*:*:*:*:*:* Versions 5.43 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:b:*:*:*:*:*:* Versions 5.43 b Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:c:*:*:*:*:*:* Versions 5.43 c Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:d:*:*:*:*:*:* Versions 5.43 d Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:-:*:*:*:*:*:* Versions 5.44 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:a:*:*:*:*:*:* Versions 5.44 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:b:*:*:*:*:*:* Versions 5.44 b Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:-:*:*:*:*:*:* Versions 5.45 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:a:*:*:*:*:*:* Versions 5.45 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:b:*:*:*:*:*:* Versions 5.45 b Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:c:*:*:*:*:*:* Versions 5.45 c Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.46:-:*:*:*:*:*:* Versions 5.46 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.46:a:*:*:*:*:*:* Versions 5.46 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:-:*:*:*:*:*:* Versions 5.47 Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:a:*:*:*:*:*:* Versions 5.47 a Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:b:*:*:*:*:*:* Versions 5.47 b Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:c:*:*:*:*:*:* Versions 5.47 c Vulnerable ·Infopop
  • cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:d:*:*:*:*:*:* Versions 5.47 d Vulnerable ·Infopop

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2001-0897
  2. 2026-10-03 Alias added: GHSA-3v2h-3966-qxpq

References

Other 2

  • TI-2000-00141 Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via… CVSS 2.0HIGH 10.0
  • TI-2002-00114 Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta… CVSS 2.0HIGH 7.5
  • TI-2002-00212 Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows… CVSS 2.0HIGH 7.5
  • TI-2005-01137 SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to… CVSS 2.0HIGH 7.5
  • TI-2022-08836 Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted… CVSS 3.1MEDIUM 5.3
  • TI-2003-00548 Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x… CVSS 2.0MEDIUM 6.9
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences