Lucene search
HistoryDec 31, 2014 - 9:59 p.m.
CVE-2014-9254
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
42.2%
bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection attacks via the code parameter in an unsubscribe action to index.php.
Affected configurations
Node
minibbminibbRange≤3.1
Related
openvas
openvas
miniBB bb_func_unsub.php 'code' Parameter Blind SQL Injection Vulnerability
2015-01-07 00:00:00
prion
prion
Sql injection
2014-12-31 21:59:00
exploitdb
exploitdb
MiniBB 3.1 - Blind SQL Injection
2014-12-19 00:00:00
cve
cve
CVE-2014-9254
2014-12-31 21:59:02
cvelist
cvelist
CVE-2014-9254
2014-12-31 21:00:00
packetstorm
packetstorm
miniBB 3.1 Blind SQL Injection
2014-12-20 00:00:00
zdt
zdt
miniBB 3.1 Blind SQL Injection Vulnerability
2014-12-18 00:00:00
exploitpack
exploitpack
MiniBB 3.1 - Blind SQL Injection
2014-12-19 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
42.2%
Related for NVD:CVE-2014-9254