VULNERABILITY INTELLIGENCE

CVE-2005-2059

CVSS score6.5 MEDIUM
EPSS probability0.96%
CISA KEVNot currently listed
Published2005-06-29
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to modify settings as another user via a link or IMG tag.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references