84 matches found
CVE-2011-3612
Cross-Site Request Forgery CSRF vulnerability exists in panel.php in UseBB before 1.0.12...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability exists in panel.php in UseBB before 1.0.12...
CVE-2011-3611
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12...
Arbitrary file deletion
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12...
CVE-2011-3612
Cross-Site Request Forgery CSRF vulnerability exists in panel.php in UseBB before 1.0.12...
CVE-2011-3612
CVE-2011-3612 concerns a Cross-Site Request Forgery in UseBB’s panel.php, affecting versions before 1.0.12. The vulnerability arises from CSRF in the panel backend, enabling unauthorized actions by an attacker if a user is authenticated. The provided sources confirm the affected component and the...
CVE-2011-3611
Summary: CVE-2011-3611 describes a File Inclusion vulnerability in UseBB prior to 1.0.12, triggered by the act parameter in admin.php. The underlying issue is improper handling of input in the affected parameter, allowing an attacker to include arbitrary files. Affected software: UseBB
CVE-2011-3611
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12...
UseBB 1.0.7 install/upgrade-0-3.php PHP_SELF Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24990/info UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
UseBB 1.0.7 install/upgrade-0-2-3.php PHP_SELF Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24990/info UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
UseBB 1.0.14 Cross Site Request Forgery
UseBB 1.0.14 CSRF Vulnerability Author : Muhammet Cagri Tepebasili Date : 11.12.2011 Script & Demo : UseBB http://demo.opensourcecms.com/usebb/index.php Version : 1.0.14 Tested On : Linux Mint 11 Exploit : UseBB 1.0.14 CSRF Vulnerability | Author : Muhammet Cagri Tepebasili Note : Your Password...
UseBB Forum 1.0.14 Cross Site Request Forgery
UseBB 1.0.14 CSRF Vulnerability Author : Muhammet Cagri Tepebasili Date : 11.12.2011 Script & Demo : UseBB http://demo.opensourcecms.com/usebb/index.php Software: http://www.usebb.net/ Version : 1.0.14 Tested On : Linux Mint 11 Exploit : UseBB 1.0.14 CSRF Vulnerability | Author : Muhammet Cagri...
UseBB 1.0.14 CSRF Vulnerability
Exploit for php platform in category web applications UseBB 1.0.14 CSRF Vulnerability Author : Muhammet Cagri Tepebasili Date : 11.12.2011 Script & Demo : UseBB http://demo.opensourcecms.com/usebb/index.php Version : 1.0.14 Tested On : Linux Mint 11 Exploit : UseBB 1.0.14 CSRF Vulnerability |...
HTB22914: Local File Inclusion in UseBB
Vulnerability ID: HTB22914 Reference: http://www.htbridge.ch/advisory/localfileinclusioninusebb.html Product: UseBB Vendor: UseBB http://www.usebb.net/ Vulnerable Version: 1.0.11 Vendor Notification: 22 March 2011 Vulnerability Type: Local File Inclusion Risk level: Medium Credit: High-Tech Bridg...
HTB22913: Multiple CSRF (Cross-Site Request Forgery) in UseBB
Vulnerability ID: HTB22913 Reference: http://www.htbridge.ch/advisory/multiplecsrfcrosssiterequestforgeryinusebb.html Product: UseBB Vendor: UseBB http://www.usebb.net/ Vulnerable Version: 1.0.11 Vendor Notification: 22 March 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Lo...
UseBB 1.0.11 - 'admin.php' Local File Inclusion
source: https://www.securityfocus.com/bid/47166/info UseBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the...
UseBB 1.0.11 - admin.php Local File Inclusion
UseBB 1.0.11 - admin.php Local File Inclusion source: https://www.securityfocus.com/bid/47166/info UseBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information...
UseBB 1.0.11 Cross Site Request Forgery / Local File Inclusion
================================== Vulnerability ID: HTB22914 Reference: http://www.htbridge.ch/advisory/localfileinclusioninusebb.html Product: UseBB Vendor: UseBB http://www.usebb.net/ Vulnerable Version: 1.0.11 Vendor Notification: 22 March 2011 Vulnerability Type: Local File Inclusion Risk...
Multiple Vulnerabilities in UseBB
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in UseBB which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in UseBB 1.1 The vulnerability exists due to insufficient validation of the request...
CVE-2010-3713
rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed...