Summary
| Detail | |||
|---|---|---|---|
| Vendor | Ubbcentral | First view | 2004-10-21 |
| Product | Ubb.Threads | Last view | 2012-09-23 |
| Version | Type | Application | |
| Update | |||
| Edition | |||
| Language | |||
| Sofware Edition | |||
| Target Software | |||
| Target Hardware | |||
| Other | |||
Activity : Overall
COMMON PLATFORM ENUMERATION: Repartition per Version
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 4.3 | 2012-09-23 | CVE-2012-5104 | Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter. |
| 7.5 | 2009-08-13 | CVE-2008-6970 | SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter. |
| 7.5 | 2007-04-10 | CVE-2007-1956 | SQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the C parameter. |
| 5 | 2006-10-03 | CVE-2006-5138 | Groupee UBB.threads 6.5.1.1 allows remote attackers to obtain sensitive information via a direct request for cron/php/subscriptions.php, which reveals the path in an error message. |
| 5.1 | 2006-10-03 | CVE-2006-5137 | Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to (1) inject PHP code via a theme[] array parameter to admin/doedittheme.php, which is injected into includes/theme.inc.php; (2) inject PHP code via a config[] array parameter to admin/doeditconfig.php, and then execute the code via includes/config.inc.php; and inject a reference to PHP code via a URL in the config[path] parameter, and then execute the code via (3) dorateuser.php, (4) calendar.php, and unspecified other scripts. |
| 7.5 | 2006-10-03 | CVE-2006-5136 | Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[thispath] or (2) GLOBALS[configdir] parameter. |
| 4.3 | 2006-06-01 | CVE-2006-2755 | Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords. |
| 5.1 | 2006-05-30 | CVE-2006-2675 | PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters. |
| 5.1 | 2006-05-24 | CVE-2006-2568 | PHP remote file inclusion vulnerability in addpost_newpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial) allows remote attackers to execute arbitrary PHP code via a URL in the thispath parameter. |
| 5 | 2006-03-28 | CVE-2006-1423 | SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQL commands via the Number parameter. |
| 7.5 | 2006-02-03 | CVE-2006-0545 | SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter. |
| 5 | 2005-06-29 | CVE-2005-2061 | Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include arbitrary files via the language parameter in a cookie followed by a null (%00) byte. |
| 5 | 2005-06-29 | CVE-2005-2060 | Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the Cat parameter. |
| 6.5 | 2005-06-29 | CVE-2005-2059 | Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to modify settings as another user via a link or IMG tag. |
| 7.5 | 2005-06-29 | CVE-2005-2058 | Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php. |
| 6.8 | 2005-06-29 | CVE-2005-2057 | Multiple cross-site scripting (XSS) vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to inject arbitrary web script or HTML via the (1) Searchpage parameter to dosearch.php, (2) Number, (3) what, or (4) page parameter to newreply.php, (5) Number, (6) Board, or (7) what parameter to showprofile.php, (8) fpart or (9) page parameter to showflat.php, or (10) like parameter to showmembers.php. |
| 7.5 | 2005-05-02 | CVE-2005-0726 | SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL commands via the Number parameter. |
| 4.3 | 2004-12-31 | CVE-2004-2510 | Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter. |
| 4.3 | 2004-12-31 | CVE-2004-2509 | Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML via the Cat parameter. |
| 7.5 | 2004-10-21 | CVE-2004-1622 | SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 50% (2) | CWE-89 | Improper Sanitization of Special Elements used in an SQL Command ('... |
| 25% (1) | CWE-352 | Cross-Site Request Forgery (CSRF) |
| 25% (1) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
CAPEC : Common Attack Pattern Enumeration & Classification
| id | Name |
|---|---|
| CAPEC-31 | Accessing/Intercepting/Modifying HTTP Cookies |
| CAPEC-34 | HTTP Response Splitting |
| CAPEC-52 | Embedding NULL Bytes |
| CAPEC-53 | Postfix, Null Terminate, and Backslash |
| CAPEC-62 | Cross Site Request Forgery (aka Session Riding) |
| CAPEC-63 | Simple Script Injection |
| CAPEC-85 | Client Network Footprinting (using AJAX/XSS) |
| CAPEC-111 | JSON Hijacking (aka JavaScript Hijacking) |
Open Source Vulnerability Database (OSVDB)
| id | Description |
|---|---|
| 47954 | UBB.threads dosearch.inc.php Forum[] Parameter SQL Injection |
| 35288 | UBB.threads ubbthreads.php C Parameter SQL Injection |
| 32325 | UBB.threads ubbt.inc.php Multiple Parameter Remote File Inclusion |
| 32322 | UBB.threads admin/doeditconfig.php config[] Variable PHP Code Injection |
| 32321 | UBB.threads admin/doedittheme.php theme[] Variable PHP Code Injection |
| 32320 | UBB.threads cron/php/subscriptions.php Direct Request Path Disclosure |
| 26121 | UBB.threads ubbt.inc.php GLOBALS[thispath] Parameter Remote File Inclusion |
| 26120 | UBB.threads index.php debug Parameter XSS |
| 25714 | UBB.threads addpost_newpoll.php thispath Parameter Remote File Inclusion |
| 22808 | UBB.threads showflat.php Number Parameter SQL Injection |
| 17533 | UBB.threads Rating System Main Parameter SQL Injection |
| 17532 | UBB.threads grabnext.php posted Parameter SQL Injection |
| 17531 | UBB.threads notifymod.php Number Parameter SQL Injection |
| 17530 | UBB.threads addfav.php main Parameter SQL Injection |
| 17529 | UBB.threads viewmessage.php message Parameter SQL Injection |
| 17528 | UBB.threads mailthread.php Number Parameter SQL Injection |
| 17527 | UBB.threads modifypost.php Number Parameter SQL Injection |
| 17526 | UBB.threads calendar.php Multiple Parameter SQL Injection |
| 17525 | UBB.threads download.php Number Parameter SQL Injection |
| 17521 | UBB.threads addaddress.php CSRF |
| 17520 | UBB.threads showprofile.php Cat Variable HTTP Response Splitting |
| 17519 | UBB.threads togglecats.php Cat Variable HTTP Response Splitting |
| 17518 | UBB.threads toggleshow.php Cat Variable HTTP Response Splitting |
| 17517 | UBB.threads dosearch.php Searchpage Parameter XSS |
| 17516 | UBB.threads showmembers.php like Parameter XSS |
Nessus® Vulnerability Scanner
| id | Description |
|---|---|
| 2006-09-30 | Name: The remote web server contains a PHP script that allows injection of arbitrar... File: ubbthreads_doeditconfig_cmd_injection.nasl - Type: ACT_DESTRUCTIVE_ATTACK |
| 2006-05-31 | Name: The remote web server contains a PHP script that is affected by a cross-site ... File: ubbthreads_debug_xss.nasl - Type: ACT_ATTACK |
| 2006-05-27 | Name: The remote web server contains a PHP application that is susceptible to remot... File: ubbthreads_thispath_file_include.nasl - Type: ACT_ATTACK |
| 2005-04-20 | Name: The remote web server contains a PHP application that is affected by numerous... File: ubbthreads_printthread_sql_injection.nasl - Type: ACT_MIXED_ATTACK |
| 2005-03-12 | Name: The remote web server contains a PHP script that is prone to SQL injection at... File: ubbthreads_editpost_sql_injection.nasl - Type: ACT_GATHER_INFO |
| 2004-12-13 | Name: The remote web server contains a PHP script that is prone to various cross-si... File: ubbthreads_xss.nasl - Type: ACT_ATTACK |
| 2004-10-25 | Name: The remote web server contains a PHP script that is prone to SQL injection at... File: ubbthreads_sql_injection.nasl - Type: ACT_ATTACK |
