CVE-2010-3713

Published: Oct 28, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed.

Affected (32)

Products: Usebb: Usebb

Usebb

1 product

Usebb

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Usebb Usebb	Up to 1.0.10
Usebb Usebb	Version 0.1.1
Usebb Usebb	Version 0.1
Usebb Usebb	Version 0.2.1
Usebb Usebb	Version 0.2.2
Usebb Usebb	Version 0.2.3
Usebb Usebb	Version 0.2.3 a
Usebb Usebb	Version 0.2
Usebb Usebb	Version 0.3.1
Usebb Usebb	Version 0.3.2
Usebb Usebb	Version 0.3
Usebb Usebb	Version 0.4.1
Usebb Usebb	Version 0.4
Usebb Usebb	Version 0.5.1
Usebb Usebb	Version 0.5.1 a
Usebb Usebb	Version 0.5
Usebb Usebb	Version 0.6
Usebb Usebb	Version 0.6 a
Usebb Usebb	Version 0.7 beta1
Usebb Usebb	Version 0.7 beta2
Usebb Usebb	Version 1.0.1
Usebb Usebb	Version 1.0.2
Usebb Usebb	Version 1.0.3
Usebb Usebb	Version 1.0.4
Usebb Usebb	Version 1.0.5
Usebb Usebb	Version 1.0.6
Usebb Usebb	Version 1.0.7
Usebb Usebb	Version 1.0.9
Usebb Usebb	Version 1.0
Usebb Usebb	Version 1.0 rc1
Usebb Usebb	Version 1.0 rc2
Usebb Usebb	Version 1.0 rc3