Infopop UBB.Threads prior to 6.5.2 Beta allows remote malicious users to include arbitrary files via the language parameter in a cookie followed by a null (%00) byte.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ubbcentral ubb.threads 6.0.3 |
||
ubbcentral ubb.threads 6.1 |
||
ubbcentral ubb.threads 6.3.1 |
||
ubbcentral ubb.threads 6.4 |
||
ubbcentral ubb.threads 6.0 |
||
ubbcentral ubb.threads 6.2.1 |
||
ubbcentral ubb.threads 6.2.2 |
||
ubbcentral ubb.threads 6.4.3 |
||
ubbcentral ubb.threads 6.4.4 |
||
ubbcentral ubb.threads 6.1.1 |
||
ubbcentral ubb.threads 6.2 |
||
ubbcentral ubb.threads 6.4.1 |
||
ubbcentral ubb.threads 6.4.2 |
||
ubbcentral ubb.threads 6.0.1 |
||
ubbcentral ubb.threads 6.0.2 |
||
ubbcentral ubb.threads 6.2.3 |
||
ubbcentral ubb.threads 6.3 |
||
ubbcentral ubb.threads 6.5 |
||
ubbcentral ubb.threads 6.5.1 |
||
ubbcentral ubb.threads 6.5.1.1 |
Vulmon