CVE-2004-2509

no score yetEPSS 2.2%

Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML via the Cat parameter.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
Published: 2004-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ubbcentral:ubb.threads

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html
http://secunia.com/advisories/13452
http://securitytracker.com/id?1012503
http://www.osvdb.org/12365
http://www.osvdb.org/12366

Check your stack JSON