CVE-2005-2060

Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*

History

20 Nov 2024, 23:58

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=111963737202040&w=2 - () http://marc.info/?l=bugtraq&m=111963737202040&w=2 -
References () http://www.gulftech.org/?node=research&article_id=00084-06232005 - Patch, Vendor Advisory () http://www.gulftech.org/?node=research&article_id=00084-06232005 - Patch, Vendor Advisory
References () http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351 - Patch () http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351 - Patch

Information

Published : 2005-06-29 04:00

Updated : 2024-11-20 23:58


NVD link : CVE-2005-2060

Mitre link : CVE-2005-2060

CVE.ORG link : CVE-2005-2060


JSON object : View

Products Affected

ubbcentral

  • ubb.threads