Security readout for executives and security teams
Plain-English summary
UseBB versions before 1.0.12 have a file inclusion flaw in admin.php. If an affected forum is still running, an attacker may be able to make the application include unintended local files. The sources do not provide CVSS, prerequisites, or confirmed active exploitation.
Executive priority
Treat this as a targeted legacy-software risk, not a confirmed widespread emergency. Prioritize asset discovery first, then upgrade or isolate any affected UseBB systems still exposed to users or the internet.
Technical view
CVE-2011-3611 concerns the act parameter to admin.php in UseBB before 1.0.12. Public references describe local file inclusion and CSRF-related issues for UseBB 1.0.11. The bundle does not state authentication requirements, reachable attack surface, impact boundaries, or a vendor mitigation beyond the fixed version threshold.
Likely exposure
Exposure is limited to organizations still running legacy UseBB before 1.0.12. Risk is higher if admin.php is internet-accessible or reachable by untrusted users. Modern environments not using UseBB are not affected based on the supplied sources.
Exploitation context
CISA KEV is false in the bundle, and no provided source states active exploitation. Packet Storm and advisory references indicate public disclosure details existed, but this analysis does not rely on or reproduce exploit instructions.
Researcher notes
The record lacks CVSS, CWE, CPEs, exploit prerequisites, and detailed vendor remediation text. The main grounded facts are product, version boundary, vulnerable file, vulnerable parameter, and file inclusion class. Avoid assuming remote unauthenticated reachability without local validation.
Mitigation direction
- Inventory web assets for UseBB installations and versions before 1.0.12.
- Upgrade affected UseBB deployments to 1.0.12 or later where supported.
- If upgrade is not possible, restrict access to admin.php to trusted networks.
- Review vendor or project guidance before applying compensating controls.
- Retire unsupported legacy forum software where business use no longer justifies risk.
Validation and detection
- Confirm whether UseBB is deployed in production, staging, or archived web roots.
- Record the exact UseBB version for each discovered installation.
- Check whether admin.php is reachable from the internet or untrusted networks.
- Review web logs for unusual requests involving admin.php and the act parameter.
- Verify remediation by confirming the instance is no longer before 1.0.12.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2011-3611 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://www.openwall.com/lists/oss-security/2011/10/10/4CVE reference · x_refsource_MISC
- https://packetstormsecurity.com/files/100103/UseBB-1.0.11-Cross-Site-Request-Forgery-Local-File-Inclusion.htmlCVE reference · x_refsource_MISC
- https://www.immuniweb.com/advisory/HTB22913CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.