CVE-2001-0897: Infopop Ultimate Bulletin Board

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.

Affected products

• Infopop Ultimate Bulletin Board: affected versions not specified; version 1.0 only; version 2.0 only; version 2.01 only; version 2.02 only; version 2.03 only; …

Published 2001-11-15. Last modified 2026-06-16.