CVE-2011-3612

Description

References

• packetstormsecurity.com/files/100103/UseBB-1.0.11-Cross-Site-Request-Forgery-Local-File-Inclusion.html · Exploit
• immuniweb.com/advisory/HTB22913 · Exploit
• openwall.com/lists/oss-security/2011/10/10/4 · Mailing List

Weitere Schwachstellen in usebb

• CVE-2020-8088KRITISCH 9.8panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandle…
• CVE-2011-3611HOCH 7.2A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12.
• CVE-2010-3713MITTEL 4.3rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permis…
• CVE-2009-4041MITTEL 5.0UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop) via crafted BBCode tags.
• CVE-2007-3963KRITISCH 9.3Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbi…