Vulnerability index

Browse CVEs

8 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Ubb.threads HIGH 7.5
CVE-2006-5136

Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote attackers to execute arbitrary PHP cod…

No fix yet
Fix from $1,950 2006-10-03
Ubb.threads MEDIUM 5.1
CVE-2006-5137

Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to (1) inject PHP code via a theme[] arra…

No fix yet
Fix from $1,600 2006-10-03
Ubb.threads MEDIUM 5.0
CVE-2006-5138

Groupee UBB.threads 6.5.1.1 allows remote attackers to obtain sensitive information via a direct request for cron/php/subscriptions.php, which reveal…

No fix yet
Fix from $1,600 2006-10-03
Ubb.threads MEDIUM 5.1
CVE-2006-2568EPSS 8%

PHP remote file inclusion vulnerability in addpost_newpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial) allows remote attackers to execut…

No fix yet
Fix from $1,600 2006-05-24
Ubb.threads MEDIUM 5.0
CVE-2006-1423

SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQ…

Mitigation only
Fix from $1,600 2006-03-28
Ubb.threads HIGH 7.5
CVE-2006-0545

SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arb…

No fix yet
Fix from $1,950 2006-02-04
Ubb.threads HIGH 7.5
CVE-2005-0726

SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL commands via the Number parameter.

Mitigation only
Fix from $1,950 2005-05-02
Ubb.threads HIGH 7.5
CVE-2004-1622

SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter.

No fix yet
Fix from $1,950 2004-10-21