GCVE - cpe:2.3:a:ubbcentral:ubb.threads:6.5.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ubbcentral:ubb.threads:6.5.2:*:*:*:*:*:*:*

part: a version: 6.5.2 update: *

Vendor	Ubbcentral (`8a0f6cfb-4f95-507d-a731-bad290f09260`)
Product	Ubb.Threads (`fc28a252-7329-53dd-8071-22c3186ba7c6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-5104`	vulnerable	2026-06-08 05:02:54.105782	Details available Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter. Published: 2012-09-23T17:00:00.000Z Updated: 2024-08-06T20:58:02.761Z Open on db.gcve.eu Reference links http://packetstormsecurity.org/files/108353/ubbforum-xss.txt http://www.osvdb.org/78192 http://www.securityfocus.com/bid/51275 http://secunia.com/advisories/47452 http://st2tea.blogspot.com/2012/01/ubb-forum756-cross-site-scripting.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6970`	vulnerable	2026-06-08 04:51:05.306367	Details available SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter. Published: 2009-08-13T16:00:00.000Z Updated: 2024-08-07T11:49:02.485Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/44976 http://www.ubbcentral.com/forums/ubbthreads.php/topics/216722/ http://osvdb.org/47954 http://www.securityfocus.com/bid/31074 http://www.gulftech.org/?node=research&article_id=00130-09082008	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2755`	vulnerable	2026-06-08 04:49:07.472344	Details available Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords. Published: 2006-06-02T01:00:00.000Z Updated: 2024-08-07T17:58:52.057Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1007 http://www.securityfocus.com/archive/1/435288/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/26870 http://www.securityfocus.com/archive/1/435296/100/0/threaded http://www.nukedx.com/?viewdoc=40	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2675`	vulnerable	2026-06-08 04:49:07.312087	Details available PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters. Published: 2006-05-30T21:00:00.000Z Updated: 2024-08-07T17:58:51.800Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/985 https://exchange.xforce.ibmcloud.com/vulnerabilities/26866 http://www.securityfocus.com/archive/1/435288/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2568`	vulnerable	2026-06-08 04:49:07.079905	Details available PHP remote file inclusion vulnerability in addpost_newpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial) allows remote attackers to execute arbitrary PHP code via a URL in the thispath parameter. Published: 2006-05-24T23:00:00.000Z Updated: 2024-08-07T17:58:51.361Z Open on db.gcve.eu Reference links http://secunia.com/advisories/20242 http://www.vupen.com/english/advisories/2006/1915 http://www.securityfocus.com/bid/18075 https://www.exploit-db.com/exploits/1814 http://www.osvdb.org/25714	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Ubb.Threads

Notes

PURL mappings

Vulnerability references

Contribute