Vulnerabilities > Vubb > Vubb > alpha.rc1

DATE CVE VULNERABILITY TITLE RISK
2005-12-31 CVE-2005-4613 Cross-Site Scripting vulnerability in Vubb Alpharc1
Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fields in the user edit profile.
network
vubb
4.3
2005-12-31 CVE-2005-4612 SQL-Injection vulnerability in Vubb Alpharc1
Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via the (1) f parameter to viewforum.php, (2) t parameter to viewtopic.php, and (3) view parameter to usercp.php.
network
low complexity
vubb
7.5