Usebb - vulnerabilities (CVEs)
10 CVEs in 1 products, 0 in the last 30 days, newest from 2020-01-27.
Products
- Usebb - 10 CVEs
Newest CVEs of Usebb
- CVE-2020-8088 - CVSS 9.8 (critical), 2020-01-27: panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that…
- CVE-2011-3612 - CVSS 8.8 (high), 2020-01-22: Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12.
- CVE-2011-3611 - CVSS 7.2 (high), 2020-01-22: A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12.
- CVE-2010-3713 - CVSS 4.3 (medium), 2010-10-28: rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows…
- CVE-2009-4041 - CVSS 5 (medium), 2009-11-20: UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop) via crafted BBCode tags.
- CVE-2007-3963 - CVSS 9.3 (critical), 2007-07-25: Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script…
- CVE-2007-2066 - CVSS 5 (medium), 2007-04-18: UseBB before 1.0.6 allows remote attackers to obtain sensitive information via a request with unspecified GET or POST parameters to an unspecified script,…
- CVE-2006-2525 - CVSS 6.4 (medium), 2006-05-22: SQL injection vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to execute arbitrary SQL commands via the member list search module.
- CVE-2006-2524 - CVSS 6.8 (medium), 2006-05-22: Cross-site scripting (XSS) vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors…
- CVE-2005-2439 - CVSS 7.5 (high), 2005-08-03: SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the…
