CVE-2005-2059: Ubbcentral Ubb.threads

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to modify settings as another user via a link or IMG tag.

Affected products

• Ubbcentral Ubb.threads: up to and including 6.5.1.1

Published 2005-06-29. Last modified 2026-06-16.