Vulnerabilities > Usebb > Usebb > 1.0.2
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2020-01-22 | CVE-2011-3612 | Cross-Site Request Forgery (CSRF) vulnerability in Usebb Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12. | 6.8 |
2020-01-22 | CVE-2011-3611 | Improper Input Validation vulnerability in Usebb A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12. | 9.0 |
2010-10-28 | CVE-2010-3713 | Permissions, Privileges, and Access Controls vulnerability in Usebb rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed. | 4.3 |
2007-07-25 | CVE-2007-3963 | Cross-Site Scripting vulnerability in UseBB PHP_SELF Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF) to (1) upgrade-0-2-3.php, (2) upgrade-0-3.php, or (3) upgrade-0-4.php in install/, a different vulnerability than CVE-2005-4193. | 9.3 |
2007-04-18 | CVE-2007-2066 | Information Disclosure vulnerability in UseBB UseBB before 1.0.6 allows remote attackers to obtain sensitive information via a request with unspecified GET or POST parameters to an unspecified script, which reveals the path in an error message. | 5.0 |