Filtered by vendor Jaxultrabb Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-5511 1 Jaxultrabb 1 Jaxultrabb 2017-10-19 N/A
Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter.
CVE-2008-2966 1 Jaxultrabb 1 Jaxultrabb 2017-09-29 N/A
Directory traversal vulnerability in viewprofile.php in JaxUltraBB 2.0 and earlier allows remote attackers to read arbitrary local files via a .. (dot dot) in the user parameter. party information.