96 matches found
CVE-2020-8088: Undefined Security Weakness
panellogin.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...
CVE-2011-3612
Cross-Site Request Forgery CSRF vulnerability exists in panel.php in UseBB before 1.0.12...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability exists in panel.php in UseBB before 1.0.12...
CVE-2011-3611
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12...
Arbitrary file deletion
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12...
CVE-2011-3612
CVE-2011-3612 concerns a Cross-Site Request Forgery in UseBB’s panel.php, affecting versions before 1.0.12. The vulnerability arises from CSRF in the panel backend, enabling unauthorized actions by an attacker if a user is authenticated. The provided sources confirm the affected component and the...
CVE-2011-3612
Cross-Site Request Forgery CSRF vulnerability exists in panel.php in UseBB before 1.0.12...
CVE-2011-3611
Summary: CVE-2011-3611 describes a File Inclusion vulnerability in UseBB prior to 1.0.12, triggered by the act parameter in admin.php. The underlying issue is improper handling of input in the affected parameter, allowing an attacker to include arbitrary files. Affected software: UseBB
CVE-2011-3611
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12...
CVE-2011-3612: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability exists in panel.php in UseBB before 1.0.12...
CVE-2011-3611: Improper Input Validation
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12...
UseBB 1.0.7 install/upgrade-0-3.php PHP_SELF Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24990/info UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
UseBB 1.0.7 install/upgrade-0-2-3.php PHP_SELF Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24990/info UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
UseBB 1.0.14 Cross Site Request Forgery
UseBB 1.0.14 CSRF Vulnerability Author : Muhammet Cagri Tepebasili Date : 11.12.2011 Script & Demo : UseBB http://demo.opensourcecms.com/usebb/index.php Version : 1.0.14 Tested On : Linux Mint 11 Exploit : UseBB 1.0.14 CSRF Vulnerability | Author : Muhammet Cagri Tepebasili Note : Your Password...
UseBB Forum 1.0.14 Cross Site Request Forgery
UseBB 1.0.14 CSRF Vulnerability Author : Muhammet Cagri Tepebasili Date : 11.12.2011 Script & Demo : UseBB http://demo.opensourcecms.com/usebb/index.php Software: http://www.usebb.net/ Version : 1.0.14 Tested On : Linux Mint 11 Exploit : UseBB 1.0.14 CSRF Vulnerability | Author : Muhammet Cagri...
UseBB 1.0.14 CSRF Vulnerability
Exploit for php platform in category web applications UseBB 1.0.14 CSRF Vulnerability Author : Muhammet Cagri Tepebasili Date : 11.12.2011 Script & Demo : UseBB http://demo.opensourcecms.com/usebb/index.php Version : 1.0.14 Tested On : Linux Mint 11 Exploit : UseBB 1.0.14 CSRF Vulnerability |...
HTB22913: Multiple CSRF (Cross-Site Request Forgery) in UseBB
Vulnerability ID: HTB22913 Reference: http://www.htbridge.ch/advisory/multiplecsrfcrosssiterequestforgeryinusebb.html Product: UseBB Vendor: UseBB http://www.usebb.net/ Vulnerable Version: 1.0.11 Vendor Notification: 22 March 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Lo...
HTB22914: Local File Inclusion in UseBB
Vulnerability ID: HTB22914 Reference: http://www.htbridge.ch/advisory/localfileinclusioninusebb.html Product: UseBB Vendor: UseBB http://www.usebb.net/ Vulnerable Version: 1.0.11 Vendor Notification: 22 March 2011 Vulnerability Type: Local File Inclusion Risk level: Medium Credit: High-Tech Bridg...
UseBB 1.0.11 - 'admin.php' Local File Inclusion
source: https://www.securityfocus.com/bid/47166/info UseBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the...
UseBB 1.0.11 - admin.php Local File Inclusion
UseBB 1.0.11 - admin.php Local File Inclusion source: https://www.securityfocus.com/bid/47166/info UseBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information...