Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ubbcentral ubb.threads 6.5.1.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2006-2568
PHP remote file inclusion vulnerability in addpost_newpoll.php in UBB.threads 6.4 up to and including 6.5.2 and 6.5.1.1 (trial) allows remote malicious users to execute arbitrary PHP code via a URL in the thispath parameter.
Ubbcentral Ubb.threads 6.4Ubbcentral Ubb.threads 6.5.2Ubbcentral Ubb.threads 6.5.1Ubbcentral Ubb.threads 6.5.1.1Ubbcentral Ubb.threads 6.4.3Ubbcentral Ubb.threads 6.4.4Ubbcentral Ubb.threads 6.5Ubbcentral Ubb.threads 6.4.1Ubbcentral Ubb.threads 6.4.2
NA
CVE-2006-5137
Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote malicious users to (1) inject PHP code via a theme[] array parameter to admin/doedittheme.php, which is injected into includes/theme.inc.php; (2) inject PHP code via a config[] array...
Ubbcentral Ubb.threads 6.5.1.1
NA
CVE-2006-5136
Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote malicious users to execute arbitrary PHP code via a URL in the (1) GLOBALS[thispath] or (2) GLOBALS[configdir] parameter.
Ubbcentral Ubb.threads 6.5.1.1
NA
CVE-2006-5138
Groupee UBB.threads 6.5.1.1 allows remote malicious users to obtain sensitive information via a direct request for cron/php/subscriptions.php, which reveals the path in an error message.
Ubbcentral Ubb.threads 6.5.1.1
NA
CVE-2005-2057
Multiple cross-site scripting (XSS) vulnerabilities in Infopop UBB.Threads prior to 6.5.2 Beta allow remote malicious users to inject arbitrary web script or HTML via the (1) Searchpage parameter to dosearch.php, (2) Number, (3) what, or (4) page parameter to newreply.php, (5) Nu...
Ubbcentral Ubb.threads 6.0Ubbcentral Ubb.threads 6.2.1Ubbcentral Ubb.threads 6.2.2Ubbcentral Ubb.threads 6.1.1Ubbcentral Ubb.threads 6.2Ubbcentral Ubb.threads 6.4.2Ubbcentral Ubb.threads 6.4.3Ubbcentral Ubb.threads 6.0.1Ubbcentral Ubb.threads 6.0.2Ubbcentral Ubb.threads 6.3Ubbcentral Ubb.threads 6.3.1Ubbcentral Ubb.threads 6.5.1Ubbcentral Ubb.threads 6.5.1.1Ubbcentral Ubb.threads 6.0.3Ubbcentral Ubb.threads 6.1Ubbcentral Ubb.threads 6.4Ubbcentral Ubb.threads 6.4.1Ubbcentral Ubb.threads 6.2.3Ubbcentral Ubb.threads 6.4.4Ubbcentral Ubb.threads 6.5
NA
CVE-2005-2058
Multiple SQL injection vulnerabilities in Infopop UBB.Threads prior to 6.5.2 Beta allow remote malicious users to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year param...
Ubbcentral Ubb.threads 6.0.1Ubbcentral Ubb.threads 6.0.2Ubbcentral Ubb.threads 6.2.3Ubbcentral Ubb.threads 6.3Ubbcentral Ubb.threads 6.3.1Ubbcentral Ubb.threads 6.5.1Ubbcentral Ubb.threads 6.5.1.1Ubbcentral Ubb.threads 6.1.1Ubbcentral Ubb.threads 6.2Ubbcentral Ubb.threads 6.4.2Ubbcentral Ubb.threads 6.4.3Ubbcentral Ubb.threads 6.0Ubbcentral Ubb.threads 6.2.1Ubbcentral Ubb.threads 6.2.2Ubbcentral Ubb.threads 6.4.4Ubbcentral Ubb.threads 6.5Ubbcentral Ubb.threads 6.0.3Ubbcentral Ubb.threads 6.1Ubbcentral Ubb.threads 6.4Ubbcentral Ubb.threads 6.4.1
NA
CVE-2005-2060
Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads prior to 6.5.2 Beta allow remote malicious users to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Ca...
Ubbcentral Ubb.threads 6.1.1Ubbcentral Ubb.threads 6.2Ubbcentral Ubb.threads 6.0Ubbcentral Ubb.threads 6.2.1Ubbcentral Ubb.threads 6.2.2Ubbcentral Ubb.threads 6.4.3Ubbcentral Ubb.threads 6.4.4Ubbcentral Ubb.threads 6.5Ubbcentral Ubb.threads 6.0.3Ubbcentral Ubb.threads 6.1Ubbcentral Ubb.threads 6.3.1Ubbcentral Ubb.threads 6.4Ubbcentral Ubb.threads 6.0.1Ubbcentral Ubb.threads 6.0.2Ubbcentral Ubb.threads 6.2.3Ubbcentral Ubb.threads 6.3Ubbcentral Ubb.threads 6.5.1Ubbcentral Ubb.threads 6.5.1.1Ubbcentral Ubb.threads 6.4.1Ubbcentral Ubb.threads 6.4.2
NA
CVE-2005-2061
Infopop UBB.Threads prior to 6.5.2 Beta allows remote malicious users to include arbitrary files via the language parameter in a cookie followed by a null (%00) byte.
Ubbcentral Ubb.threads 6.0.3Ubbcentral Ubb.threads 6.1Ubbcentral Ubb.threads 6.3.1Ubbcentral Ubb.threads 6.4Ubbcentral Ubb.threads 6.0Ubbcentral Ubb.threads 6.2.1Ubbcentral Ubb.threads 6.2.2Ubbcentral Ubb.threads 6.4.3Ubbcentral Ubb.threads 6.4.4Ubbcentral Ubb.threads 6.1.1Ubbcentral Ubb.threads 6.2Ubbcentral Ubb.threads 6.4.1Ubbcentral Ubb.threads 6.4.2Ubbcentral Ubb.threads 6.0.1Ubbcentral Ubb.threads 6.0.2Ubbcentral Ubb.threads 6.2.3Ubbcentral Ubb.threads 6.3Ubbcentral Ubb.threads 6.5Ubbcentral Ubb.threads 6.5.1Ubbcentral Ubb.threads 6.5.1.1
NA
CVE-2006-2755
Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and previous versions allows remote malicious users to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords.
Ubbcentral Ubb.threads 5.0Ubbcentral Ubb.threads 6.1.1Ubbcentral Ubb.threads 6.2Ubbcentral Ubb.threads 6.4.2Ubbcentral Ubb.threads 6.4.3Ubbcentral Ubb.threads 6.5.3Ubbcentral Ubb.threads 5.5.1Ubbcentral Ubb.threads 6.0Ubbcentral Ubb.threads 6.2.1Ubbcentral Ubb.threads 6.2.2Ubbcentral Ubb.threads 6.4.4Ubbcentral Ubb.threads 6.5Ubbcentral Ubb.threads 6.0.3Ubbcentral Ubb.threads 6.1Ubbcentral Ubb.threads 6.4Ubbcentral Ubb.threads 6.4.1Ubbcentral Ubb.threads 6.5.2Ubbcentral Ubb.threads 6.5.2 Beta2Ubbcentral Ubb.threads 6.0.1Ubbcentral Ubb.threads 6.0.2Ubbcentral Ubb.threads 6.2.3Ubbcentral Ubb.threads 6.3
NA
CVE-2006-2675
PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote malicious users to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters.
Ubbcentral Ubb.threads 3.4Ubbcentral Ubb.threads 3.5Ubbcentral Ubb.threads 6.1Ubbcentral Ubb.threads 6.1.1Ubbcentral Ubb.threads 5.0Ubbcentral Ubb.threads 5.5.1Ubbcentral Ubb.threads 6.2Ubbcentral Ubb.threads 6.2.1Ubbcentral Ubb.threads 6.4.2Ubbcentral Ubb.threads 6.4.3Ubbcentral Ubb.threads 6.4.4Ubbcentral Ubb.threads 6.4Ubbcentral Ubb.threads 6.4.1Ubbcentral Ubb.threads 6.5.2 Beta2Ubbcentral Ubb.threadsUbbcentral Ubb.threads 6.0Ubbcentral Ubb.threads 6.0.1Ubbcentral Ubb.threads 6.2.2Ubbcentral Ubb.threads 6.2.3Ubbcentral Ubb.threads 6.5Ubbcentral Ubb.threads 6.5.1Ubbcentral Ubb.threads 6.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook