UseBB 1.0.11 - admin.php Local File Inclusion

UseBB 1.0.11 - admin.php Local File Inclusion source: https://www.securityfocus.com/bid/47166/info UseBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information...

Multiple Vulnerabilities in UseBB

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in UseBB which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in UseBB 1.1 The vulnerability exists due to insufficient validation of the request...

CVE-2010-3713

rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed...

Design/Logic Flaw

rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed...

CVE-2010-3713

CVE-2010-3713 affects UseBB up to version 1.0.10. RSS feeds (rss.php) do not correctly honor read vs. view permissions: a user with view permission but lacking read permission can bypass access restrictions by reading a forum feed together with a topic feed. This exposes restricted forum content ...

CVE-2010-3713

rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed...

CVE-2010-3713: Undefined Security Weakness

rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed...

UseBB Forum and Topic Feed Security Bypass Vulnerability

UseBB is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

UseBB Forum and Topic Feed Security Bypass Vulnerability

UseBB is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to gain access to restricted forum and feed content. Versions prior to UseBB 1.0.11 are vulnerable. OpenVAS Vulnerability Test $Id: gbusebb43292.nasl 5388 2017-02-21 15:13:30Z teissa $ UseBB Forum and Topic...

UseBB BBcode Parsing Remote Denial Of Service Vulnerability

This host has UseBB installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodusebbbbcodedosvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ UseBB BBcode Parsing Remote Denial Of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

UseBB Version Detection

This script detects the installed UseBB version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UseBB BBcode Parsing Remote Denial Of Service Vulnerability

UseBB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service infinite loop via crafted BBCode tags...

CVE-2009-4041

UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service infinite loop via crafted BBCode tags...

CVE-2009-4041

UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service infinite loop via crafted BBCode tags...

CVE-2009-4041

CVE-2009-4041 affects UseBB 1.0.9 before 1.0.10. A crafted BBCode tag causes the BBCode parser to loop infinitely, enabling a remote attacker to trigger a denial of service. The available connected documents confirm the DoS condition but do not provide a patched version or definitive remediation ...

CVE-2009-4041: Undefined Security Weakness

UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service infinite loop via crafted BBCode tags...

CVE-2007-3963

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...

CVE-2007-3963

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...