CVE:CVE-2010-3713
CNNVD:CNNVD-201010-403
UseBB 是一个易于使用的PHP/MySQL公告牌系统，支持多用户和管理功能。
UseBB 1.0.11之前版本中的rss.php文件不能正确处理论坛配置为用户只有浏览权限而无阅读权限的状况。远程攻击者可以通过读取与标题相关的反馈绕过预设的访问限制。
solution:Upgrade usebb usebb to a higher version than 1.0.10,0.1,0.1.1,0.2,0.2.1,0.2.2,0.2.3,0.2.3:a,0.3,0.3.1,0.3.2,0.4,0.4.1,0.5,0.5.1,0.5.1:a,0.6,0.6:a,0.7:beta1,0.7:beta2,1.0,1.0:rc1,1.0:rc2,1.0:rc3,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.9,and avoid the version (,1.0.10],0.1,0.1.1,0.2,0.2.1,0.2.2,0.2.3,0.2.3:a,0.3,0.3.1,0.3.2,0.4,0.4.1,0.5,0.5.1,0.5.1:a,0.6,0.6:a,0.7:beta1,0.7:beta2,1.0,1.0:rc1,1.0:rc2,1.0:rc3,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.9