CVE-2008-2066

概要

参考情報

• osvdb.org/95122
• seclists.org/fulldisclosure/2013/Jul/102
• secunia.com/advisories/30004 · Vendor Advisory
• securityreason.com/securityalert/3846
• minibb.com/download.php
• minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html
• securityfocus.com/archive/1/491375/100/0/threaded
• securityfocus.com/bid/28957 · Exploit
• securityfocus.com/bid/61116
• exchange.xforce.ibmcloud.com/vulnerabilities/42076
• mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb

minibb のその他の脆弱性

• CVE-2018-6506中 4.8Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribut…
• CVE-2014-9254高 7.5bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection…
• CVE-2013-5020中 4.3Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web sc…
• CVE-2008-2067高 7.5SQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus paramete…
• CVE-2008-2029中 6.8Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earlier, when register_gl…