CVE-2001-0897

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows...

5.0 Medium

CVE-2001-0897 is a medium vulnerability (CVSS 5.0) in Infopop Ultimate Bulletin Board, published November 15, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.93%, the 80th percentile. No source names a fixed version.

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.

Exploit likelihood

1.93%Up 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2001-0897
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2001-0897
Updated: 2026-11-02

EUVDEUVD-2001-0880 No score

Record: EUVD-2001-0880
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3v2h-3966-qxpq No score

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows...

Record: GHSA-3v2h-3966-qxpq
Updated: 2026-11-02

Affected products

infopop ultimate bulletin board

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

Exploit likelihood

What each source reports

Affected products

History

References