CVE-2008-2067

Description

References

• osvdb.org/95121
• seclists.org/fulldisclosure/2013/Jul/102
• secunia.com/advisories/30004 · Vendor Advisory
• securityreason.com/securityalert/3846
• minibb.com/download.php
• minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html
• securityfocus.com/archive/1/491375/100/0/threaded
• securityfocus.com/bid/61116
• exchange.xforce.ibmcloud.com/vulnerabilities/42270
• mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb

More vulnerabilities in minibb

• CVE-2018-6506MEDIUM 4.8Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribut…
• CVE-2014-9254HIGH 7.5bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection…
• CVE-2013-5020MEDIUM 4.3Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web sc…
• CVE-2008-2066MEDIUM 4.3Cross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via t…
• CVE-2008-2029MEDIUM 6.8Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earlier, when register_gl…