CVE-2005-4612

Description

References

• pridels0.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html
• osvdb.org/21329 · Exploit
• osvdb.org/21330 · Exploit
• osvdb.org/21331 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/24350

vubb의 다른 취약점

• CVE-2006-6231보통 5.0vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the pa…
• CVE-2006-6230높음 7.5SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a …
• CVE-2006-0962높음 7.5SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie.
• CVE-2005-4613보통 4.3Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fi…
• CVE-2005-3513보통 5.0index.php in VUBB alpha rc1 allows remote attackers to obtain the installation path of the application via a viewforum action with the f par…