Usebb

12 CVEs across 1 Usebb products. Browse Usebb vulnerabilities, severities, and proof-of-concept exploits.

Usebb products with known CVEs

ProductCVEs
Usebb12
Usebb CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-8088Critical9.82020-01-27panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin…
CVE-2011-3612High8.82020-01-22Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12.
CVE-2011-3611High7.22020-01-22A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12.
CVE-2010-37132010-10-28rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows…
CVE-2009-40412009-11-20UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop) via crafted BBCode tags.
CVE-2007-39632007-07-25Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or…
CVE-2007-20662007-04-18UseBB before 1.0.6 allows remote attackers to obtain sensitive information via a request with unspecified GET or POST parameters to an unspecified script, whic…
CVE-2006-25252006-05-22SQL injection vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to execute arbitrary SQL commands via the member list search module.
CVE-2006-25242006-05-22Cross-site scripting (XSS) vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors wh…
CVE-2005-41932005-12-13Cross-site scripting (XSS) vulnerability in UseBB before 0.7 allows remote attackers to inject arbitrary web script or HTML via the $_SERVER['PHP_SELF'] variab…
CVE-2005-24392005-08-03SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the se…
CVE-2005-24382005-08-03Cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to inject arbitrary Javascript via the BBCode color value.