Filtered by vendor Jaxultrabb
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2006-5511 | 1 Jaxultrabb | 1 Jaxultrabb | 2024-08-07 | N/A |
Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter. | ||||
CVE-2008-2966 | 1 Jaxultrabb | 1 Jaxultrabb | 2024-08-07 | N/A |
Directory traversal vulnerability in viewprofile.php in JaxUltraBB 2.0 and earlier allows remote attackers to read arbitrary local files via a .. (dot dot) in the user parameter. party information. |
Page 1 of 1.