Ubb.threads@6.0.1 Security Vulnerabilities and Issues — Ubb.threads@6.0.1 CVE List

Lucene search

UbbcentralUbb.threads6.0.1

4 matches found

cve•added 2006/05/30 9:2 p.m.•51 views

CVE-2006-2675

PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters.

5.1CVSS7.6AI score0.01676EPSS

cve•added 2006/06/02 1:2 a.m.•47 views

CVE-2006-2755

Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords.

4.3CVSS5.7AI score0.06091EPSS

cve•added 2006/02/04 2:2 a.m.•40 views

CVE-2006-0545

SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter.

7.5CVSS8.4AI score0.00514EPSS

cve•added 2006/03/28 8:2 p.m.•40 views

CVE-2006-1423

SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQL commands via the Number parameter.

5CVSS8.4AI score0.00281EPSS