CVE-2006-2524

概要

参考情報

• secunia.com/advisories/20187 · Patch
• sourceforge.net/project/shownotes.php · Patch
• osvdb.org/25684
• usebb.net/community/topic.php · Patch
• vupen.com/english/advisories/2006/1900
• exchange.xforce.ibmcloud.com/vulnerabilities/26600

usebb のその他の脆弱性

• CVE-2020-8088緊急 9.8panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandle…
• CVE-2011-3612高 8.8Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12.
• CVE-2011-3611高 7.2A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12.
• CVE-2010-3713中 4.3rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permis…
• CVE-2009-4041中 5.0UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop) via crafted BBCode tags.