Vulnerabilities > Vubb
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-12-02 | CVE-2006-6231 | Information Disclosure vulnerability in Vubb 0.2/0.2.1 vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message. | 5.0 |
| 2006-12-02 | CVE-2006-6230 | SQL-Injection vulnerability in Vubb 0.2/0.2.1 SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a register action to index.php, a different vulnerability than CVE-2006-0962. | 7.5 |
| 2006-03-02 | CVE-2006-0962 | SQL Injection vulnerability in Vubb 0.2 SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie. | 7.5 |
| 2005-12-31 | CVE-2005-4613 | Cross-Site Scripting vulnerability in Vubb Alpharc1 Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fields in the user edit profile. network vubb | 4.3 |
| 2005-12-31 | CVE-2005-4612 | SQL-Injection vulnerability in Vubb Alpharc1 Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via the (1) f parameter to viewforum.php, (2) t parameter to viewtopic.php, and (3) view parameter to usercp.php. | 7.5 |