Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
UseBB rss.php文件权限许可和访问控制漏洞
Vulnerability Description
UseBB 是一个易于使用的PHP/MySQL公告牌系统，支持多用户和管理功能。 UseBB 1.0.11之前版本中的rss.php文件不能正确处理论坛配置为用户只有浏览权限而无阅读权限的状况。远程攻击者可以通过读取与标题相关的反馈绕过预设的访问限制。
CVSS Information
N/A
Vulnerability Type
N/A