6.5
CVSSv3

CVE-2005-2059

Published: 29/06/2005 Updated: 08/02/2024
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads prior to 6.5.2 Beta allow remote malicious users to modify settings as another user via a link or IMG tag.

Vulnerable Product Search on Vulmon Subscribe to Product

ubbcentral ubb.threads