PatchTheCVE: vubbhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2006-6231: vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includehttps://patchthecve.com/cve/CVE-2006-6231.htmlhttps://patchthecve.com/cve/CVE-2006-6231.htmlTue, 16 Jun 2026 22:32:43 +0000MEDIUM 5.0: vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message.CVE-2006-6230: SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commandhttps://patchthecve.com/cve/CVE-2006-6230.htmlhttps://patchthecve.com/cve/CVE-2006-6230.htmlTue, 16 Jun 2026 22:32:43 +0000HIGH 7.5: SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a register action to index.php, a different vulnerability than CVE-2006-0962.CVE-2006-0962: SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the passhttps://patchthecve.com/cve/CVE-2006-0962.htmlhttps://patchthecve.com/cve/CVE-2006-0962.htmlTue, 16 Jun 2026 22:21:45 +0000HIGH 7.5: SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie.CVE-2005-4613: Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web scrhttps://patchthecve.com/cve/CVE-2005-4613.htmlhttps://patchthecve.com/cve/CVE-2005-4613.htmlTue, 16 Jun 2026 22:19:06 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fields in the user edit profile.CVE-2005-4612: Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commahttps://patchthecve.com/cve/CVE-2005-4612.htmlhttps://patchthecve.com/cve/CVE-2005-4612.htmlTue, 16 Jun 2026 22:19:06 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via the (1) f parameter to viewforum.php, (2) t parameter to viewtopic.php, and (3) view parameter to usercp.php.CVE-2005-3513: index.php in VUBB alpha rc1 allows remote attackers to obtain the installation path of the application via a vhttps://patchthecve.com/cve/CVE-2005-3513.htmlhttps://patchthecve.com/cve/CVE-2005-3513.htmlTue, 16 Jun 2026 22:17:06 +0000MEDIUM 5.0: index.php in VUBB alpha rc1 allows remote attackers to obtain the installation path of the application via a viewforum action with the f parameter set to a single quote (').CVE-2005-3512: Cross-site scripting (XSS) vulnerability in index.php in VUBB alpha rc1 allows remote attackers to inject arbihttps://patchthecve.com/cve/CVE-2005-3512.htmlhttps://patchthecve.com/cve/CVE-2005-3512.htmlTue, 16 Jun 2026 22:17:06 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in index.php in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via the t parameter in a newreply action.