| Package | Affected versions | Patched versions |
|---|---|---|
| ubb.threads | = 6.0= 6.0.1= 6.0.2= 6.0.3= 6.1= 6.1.1= 6.2= 6.2.1= 6.2.2= 6.2.3= 6.3= 6.3.1= 6.4= 6.4.1= 6.4.2= 6.4.3= 6.4.4= 6.5= 6.5.1= 6.5.1.1 |
Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include arbitrary files via the language parameter in a cookie followed by a null (%00) byte.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free