UseBB UseBB 0.4.1
Approved changes feed: RSS · Atom
cpe:2.3:a:usebb:usebb:0.4.1:*:*:*:*:*:*:*part: a version: 0.4.1 update: *
| Vendor | Usebb (b753a95f-8673-515a-a0ef-04aafe74c1c0) |
|---|---|
| Product | Usebb (f47b3225-b615-5565-9552-8a0943302b28) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/usebb/usebb |
purl2cpe | 2026-06-01 10:11:05.564758 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-3713 |
vulnerable | 2026-06-08 04:55:16.548327 |
Details available
rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed.
Published: 2010-10-27T22:00:00.000Z
Updated: 2024-09-16T20:31:51.958Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4193 |
not_vulnerable | 2026-06-08 04:48:43.201265 |
Details available
Cross-site scripting (XSS) vulnerability in UseBB before 0.7 allows remote attackers to inject arbitrary web script or HTML via the $_SERVER['PHP_SELF'] variable.
Published: 2005-12-13T11:00:00.000Z
Updated: 2024-08-07T23:38:51.018Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2439 |
vulnerable | 2026-06-08 04:48:29.324107 |
Details available
SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function.
Published: 2005-08-03T04:00:00.000Z
Updated: 2024-08-07T22:29:59.677Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2438 |
not_vulnerable | 2026-06-08 04:48:29.322515 |
Details available
Cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to inject arbitrary Javascript via the BBCode color value.
Published: 2005-08-03T04:00:00.000Z
Updated: 2024-08-07T22:29:59.575Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.