84 matches found
CVE-2009-4041
UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service infinite loop via crafted BBCode tags...
EUVD-2020-29000
Malware in sbrugna...
EUVD-2005-4188
Malware in sbrugna...
EUVD-2011-3570
Malware in sbrugna...
EUVD-2005-2440
Malware in sbrugna...
EUVD-2006-2524
Malware in sbrugna...
EUVD-2009-4012
Malware in sbrugna...
EUVD-2010-3695
Malware in sbrugna...
EUVD-2011-3571
Malware in sbrugna...
EUVD-2007-3947
Malware in sbrugna...
EUVD-2005-2439
Malware in sbrugna...
EUVD-2006-2525
Malware in sbrugna...
CVE-2020-8088
panellogin.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...
CVE-2010-3713
rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed...
CVE-2007-2066
UseBB before 1.0.6 allows remote attackers to obtain sensitive information via a request with unspecified GET or POST parameters to an unspecified script, which reveals the path in an error message...
CVE-2020-8088
panellogin.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...
CVE-2020-8088
panellogin.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...
Design/Logic Flaw
panellogin.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...
CVE-2020-8088
CVE-2020-8088 affects UseBB 1.0.12, where panel_login.php is vulnerable to a login bypass caused by type juggling: the code uses != instead of !== for password hashes, mishandling hashes that begin with 0e and are numeric-only. This leads to potential authentication bypass without requiring a cor...
CVE-2020-8088
panellogin.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...