← Database

CVE-2005-2059

MEDIUM CVSS: 6.5 Published: 2005-06-29 Modified: 2026-06-16

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to modify settings as another user via a link or IMG tag.

Affected Platforms

Ubbcentral Ubb.Threads

Weakness Type

CWE-352

References