Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

usebb usebb vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-3713
rss.php in UseBB prior to 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote malicious users to bypass intended access restrictions by reading a forum feed in combination with a topic feed.
Usebb Usebb 1.0.5Usebb Usebb 1.0.7Usebb Usebb 0.3Usebb Usebb 0.3.1Usebb Usebb 0.2.3Usebb Usebb 0.6Usebb Usebb 1.0Usebb Usebb 1.0.4Usebb Usebb 0.4Usebb Usebb 0.2.2Usebb Usebb 0.5.1Usebb Usebb 0.7Usebb UsebbUsebb Usebb 0.1.1Usebb Usebb 0.1Usebb Usebb 1.0.9Usebb Usebb 1.0.2Usebb Usebb 1.0.1Usebb Usebb 0.4.1Usebb Usebb 0.5Usebb Usebb 0.2Usebb Usebb 1.0.3
NA
CVE-2005-2439
SQL injection vulnerability in UseBB 0.5.1 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the search function.
Usebb Usebb 0.1.1Usebb Usebb 0.2Usebb Usebb 0.3.2Usebb Usebb 0.4Usebb Usebb 0.2.3Usebb Usebb 0.2.3aUsebb Usebb 0.5.1Usebb Usebb 0.1Usebb Usebb 0.3Usebb Usebb 0.3.1Usebb Usebb 0.2.1Usebb Usebb 0.2.2Usebb Usebb 0.4.1Usebb Usebb 0.5
NA
CVE-2007-3963
Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF) to (1) upgrade-0-2-3.php, (2) upgrade-0-3.php, or (3) upgrade-0-4.php in install...
Usebb Usebb 1.0.1Usebb Usebb 1.0.2Usebb Usebb 1.0 Rc2Usebb Usebb 1.0 Rc3Usebb Usebb 1.0.3Usebb Usebb 1.0.4Usebb Usebb 1.0Usebb Usebb 1.0.7Usebb Usebb 1.0 Rc1Usebb Usebb 1.0.5Usebb Usebb 1.0.6
NA
CVE-2007-2066
UseBB prior to 1.0.6 allows remote malicious users to obtain sensitive information via a request with unspecified GET or POST parameters to an unspecified script, which reveals the path in an error message.
Usebb Usebb 1.0.3Usebb Usebb 1.0.5Usebb Usebb 1.0Usebb Usebb 1.0.1Usebb Usebb 1.0.2Usebb Usebb 1.0.4
7.2
CVSSv3
CVE-2011-3611
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB prior to 1.0.12.
Usebb Usebb
8.8
CVSSv3
CVE-2011-3612
Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB prior to 1.0.12.
Usebb Usebb
9.8
CVSSv3
CVE-2020-8088
panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
Usebb Usebb 1.0.12
NA
CVE-2009-4041
UseBB 1.0.9 prior to 1.0.10 allows remote malicious users to cause a denial of service (infinite loop) via crafted BBCode tags.
Usebb Usebb 1.0.9
NA
CVE-2006-2524
Cross-site scripting (XSS) vulnerability in UseBB 1.0 RC1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors when processing the user date format.
Usebb Usebb 1.0 Rc1
NA
CVE-2006-2525
SQL injection vulnerability in UseBB 1.0 RC1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the member list search module.
Usebb Usebb 1.0 Rc1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895blind SQL injectionCVE-2024-5064CVE-2023-52677CVE-2023-52682CVE-2024-30051CVE-2024-35849remote attackersremote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook