UBB.Threads 6.3 Showflat.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16520/info UBB.Threads is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

UBBCentral UBB.threads 6.2.3/6.5 showflat.php Cat Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/11900/info It is reported that UBB.threads is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input prior to including...

CVE-2006-1423

CVE-2006-1423 corresponds to a SQL injection vulnerability in showflat.php of UBB.threads (versions 5.5.1, 6.0 br5, 6.0.1, 6.0.2 and earlier). The issue allows remote attackers to inject arbitrary SQL through the Number parameter, enabling potential unauthorized database access. Connected sources...

CVE-2006-0545

SQL injection vulnerability in showflat.php in Groupee formerly known as Infopop UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter...

CVE-2006-0545

The CVE-2006-0545 entry describes an SQL injection in showflat.php of UBB.threads (Groupee, formerly Infopop) version 6.3 and earlier. The vulnerability allows remote attackers to craft the Number parameter to execute arbitrary SQL commands, enabling potential data disclosure or modification. Aff...

CVE-2006-0545

SQL injection vulnerability in showflat.php in Groupee formerly known as Infopop UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter...

UBBCentral UBB.Threads 6.3 - showflat.php SQL Injection

UBBCentral UBB.Threads 6.3 - showflat.php SQL Injection source: https://www.securityfocus.com/bid/16520/info UBB.Threads is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successf...

CVE-2004-2510

CVE-2004-2510 represents a cross-site scripting vulnerability in Infopop UBB.Threads, tracked with multiple sources. The flaw resides in showflat.php and can be triggered via the Cat parameter, allowing injection of arbitrary script/HTML. Affected products are Infopop UBB.Threads prior to version...