CVE-2009-4041

概要

参考情報

• secunia.com/advisories/37328 · Vendor Advisory
• securityfocus.com/bid/37010 · Patch
• usebb.net/community/topic-2388.html · Patch
• usebb.net/community/topic-post9775.html · Patch
• vupen.com/english/advisories/2009/3222 · Patch

usebb のその他の脆弱性

• CVE-2020-8088緊急 9.8panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandle…
• CVE-2011-3612高 8.8Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12.
• CVE-2011-3611高 7.2A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12.
• CVE-2010-3713中 4.3rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permis…
• CVE-2007-3963緊急 9.3Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbi…