US
Vendor
Usebb
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-8088 | US Usebb Usebb | 9.8 | Jan 27 | panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by… |
| CVE-2011-3612 | US Usebb Usebb | 8.8 | Jan 22 | Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12 |
| CVE-2011-3611 | US Usebb Usebb | 7.2 | Jan 22 | A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12 |
| CVE-2010-3713 | US Usebb Usebb | – | Oct 28 | rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to… |
| CVE-2009-4041 | US Usebb Usebb | – | Nov 20 | UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop) via crafted BBCode tags |
| CVE-2007-3963 | US Usebb Usebb | – | Jul 25 | Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2007-2066 | US Usebb Usebb | – | Apr 18 | UseBB before 1.0.6 allows remote attackers to obtain sensitive information via a request with unspecified GET or POST parameters to an unspecified script, which reveals the path… |
| CVE-2006-2525 | US Usebb Usebb | – | May 22 | SQL injection vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to execute arbitrary SQL commands via the member list search module |
| CVE-2006-2524 | US Usebb Usebb | – | May 22 | Cross-site scripting (XSS) vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when processing the… |
| CVE-2005-2439 | US Usebb Usebb | – | Aug 3 | SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function |