« Volver al listado

CVE-2002-0118

Estado: ModificadaAlta (7.5)—

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Infopop — Ultimate Bulletin Board

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-0118",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-03-25T05:00:00.000",
  "references": [
    {
      "url": "http://online.securityfocus.com/archive/1/249031",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/7838.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/3829",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://online.securityfocus.com/archive/1/249031",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/7838.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/3829",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad Cross-site en el último Bulletin Board de Infopop (UBB) 6.2.0 Beta release 1.0 que permite a atacantes remotos ejecutar  scripts y cookies de robo vía un mensaje que contiene Javascript codificado en una etiqueta IMG."
    }
  ],
  "lastModified": "2026-06-16T21:56:49.923",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:infopop:ultimate_bulletin_board:5.4.7e:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E79188C3-8C18-4B27-865E-A3D315209CAB"
            },
            {
              "criteria": "cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "109D6BE8-39AD-43A7-B620-DEAA989D809E"
            },
            {
              "criteria": "cpe:2.3:a:infopop:ultimate_bulletin_board:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D01C4960-1118-4501-9492-182F6C15B553"
            },
            {
              "criteria": "cpe:2.3:a:infopop:ultimate_bulletin_board:6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AEC46938-E4B4-4688-B7C3-230B3B438770"
            },
            {
              "criteria": "cpe:2.3:a:infopop:ultimate_bulletin_board:6.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "318B4B73-7B80-4D27-AE8E-EB56929FD151"
            },
            {
              "criteria": "cpe:2.3:a:infopop:ultimate_bulletin_board:6.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EAC93AEF-9811-4F44-A5B3-738EAA0C69EA"
            },
            {
              "criteria": "cpe:2.3:a:infopop:ultimate_bulletin_board:6.0.4f:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CBDBDDE6-395D-4F7B-975A-450231987BBF"
            },
            {
              "criteria": "cpe:2.3:a:infopop:ultimate_bulletin_board:6.0beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E54B2EE8-52CD-48F9-AEB7-6D212A0E2472"
            },
            {
              "criteria": "cpe:2.3:a:infopop:ultimate_bulletin_board:6.2.0_beta_release_1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14D70B09-9A69-4A4B-9301-650CEA0A4E1D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}