vendor:
UBBThreads
by:
nukedx.com, milw0rm.com
7.5
CVSS
HIGH
Multiple File Inclusion
98
CWE
Product Name: UBBThreads
Affected Version From: 5.x
Affected Version To: 6.x
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Mac
2006
UBBThreads 5.x,6.x Multiple File Inclusion Vulnerabilities
UBBThreads 5.x,6.x is vulnerable to multiple file inclusion vulnerabilities. An attacker can exploit this vulnerability to include arbitrary files from the local system or remote system. This can be exploited to execute arbitrary code on the vulnerable system.
Mitigation:
Disable register_globals and use input validation to prevent malicious input.
