Design/Logic Flaw

rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed...

CVE-2010-3713

CVE-2010-3713 affects UseBB up to version 1.0.10. RSS feeds (rss.php) do not correctly honor read vs. view permissions: a user with view permission but lacking read permission can bypass access restrictions by reading a forum feed together with a topic feed. This exposes restricted forum content ...

CVE-2010-3713

rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed...

UseBB Forum and Topic Feed Security Bypass Vulnerability

UseBB is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

UseBB Forum and Topic Feed Security Bypass Vulnerability

UseBB is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to gain access to restricted forum and feed content. Versions prior to UseBB 1.0.11 are vulnerable. OpenVAS Vulnerability Test $Id: gbusebb43292.nasl 5388 2017-02-21 15:13:30Z teissa $ UseBB Forum and Topic...

UseBB BBcode Parsing Remote Denial Of Service Vulnerability

This host has UseBB installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodusebbbbcodedosvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ UseBB BBcode Parsing Remote Denial Of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

UseBB Version Detection

This script detects the installed UseBB version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UseBB BBcode Parsing Remote Denial Of Service Vulnerability

UseBB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4041

UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service infinite loop via crafted BBCode tags...

Code injection

UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service infinite loop via crafted BBCode tags...

CVE-2009-4041

CVE-2009-4041 affects UseBB 1.0.9 before 1.0.10. A crafted BBCode tag causes the BBCode parser to loop infinitely, enabling a remote attacker to trigger a denial of service. The available connected documents confirm the DoS condition but do not provide a patched version or definitive remediation ...

CVE-2009-4041

UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service infinite loop via crafted BBCode tags...

CVE-2007-3963

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...

CVE-2007-3963

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...

CVE-2007-3963

CVE-2007-3963 covers multiple XSS flaws in UseBB 1.0.7 and possibly other 1.0.x versions. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via the PATH_INFO (PHP_SELF) to upgrade-0-2-3.php, upgrade-0-3.php, or upgrade-0-4.php in the install/ directory. The cited entries ...

usebb-xss.txt

Script...............: UseBB version: 1.0.7 Script Site..........: http://www.usebb.net Vulnerability........: Cross Site Scripting XSS Acces................: Remote level................: Dangerous Author...............: S4mi Contact..............: s4miatLinuxMail.org The affected Files :...

UseBB 1.0.x Cross Site Scripting (XSS)

Script...............: UseBB version: 1.0.7 Script Site..........: http://www.usebb.net Vulnerability........: Cross Site Scripting XSS Acces................: Remote level................: Dangerous Author...............: S4mi Contact..............: s4miatLinuxMail.org The affected Files :...

UseBB 1.0.7 - installupgrade-0-3.php?PHP_SELF Cross-Site Scripting

UseBB 1.0.7 - installupgrade-0-3.php?PHPSELF Cross-Site Scripting source: https://www.securityfocus.com/bid/24990/info UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

UseBB 1.0.7 - installupgrade-0-2-3.php?PHP_SELF Cross-Site Scripting

UseBB 1.0.7 - installupgrade-0-2-3.php?PHPSELF Cross-Site Scripting source: https://www.securityfocus.com/bid/24990/info UseBB is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to...