CVE-2008-2965

CVE-2008-2965 is an XSS vulnerability in JaxUltraBB (JUBB) 2.0 and earlier, specifically in viewforum.php via the forum parameter. The issue allows remote attackers to inject arbitrary script/HTML. Affected component: viewforum.php in JUBB; underlying cause is improper handling/encoding of the fo...

CVE-2006-5511

CVE-2006-5511 is a direct static code injection vulnerability in JaxUltraBB (JUBB) 2.0. When register_globals is enabled, the delete.php script allows an attacker to inject arbitrary web script/HTML/PHP via the contents parameter, which is prepended to the file specified by the forum parameter. T...