Vulnerabilities > Vubb > Vubb > 0.2

DATE CVE VULNERABILITY TITLE RISK
2006-12-02 CVE-2006-6231 Information Disclosure vulnerability in Vubb 0.2/0.2.1
vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message.
network
low complexity
vubb
5.0
2006-12-02 CVE-2006-6230 SQL-Injection vulnerability in Vubb 0.2/0.2.1
SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a register action to index.php, a different vulnerability than CVE-2006-0962.
network
low complexity
vubb
7.5
2006-03-02 CVE-2006-0962 SQL Injection vulnerability in Vubb 0.2
SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie.
network
low complexity
vubb
7.5