CVE-2005-2060

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-06-29 · updated 2026-06-16

Description

Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter.

Affected products

Ubbcentral Ubb.Threads: 6.0, 6.0.1, 6.0.2, 6.0.3, 6.1, 6.1.1 (+14)

References

http://marc.info/?l=bugtraq&m=111963737202040&w=2
http://www.gulftech.org/?node=research&article_id=00084-06232005
http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351
http://marc.info/?l=bugtraq&m=111963737202040&w=2
http://www.gulftech.org/?node=research&article_id=00084-06232005
http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351

Get alerted when CVE-2005-2060 or the next vulnerability affects your stack