EUVD-2008-2064

Malware in sbrugna...

CVE-2013-5020: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in bbadmin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 forumname, 2 forumgroup, 3 forumicon, or 4 forumdesc parameter. NOTE: the whatus vector is already covered by CVE-2008-2066...

Sql injection

SQL injection vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...

CVE-2008-2067

SQL injection vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...

CVE-2008-2066: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...

CVE-2008-2067: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...

MiniBB bb_admin.php模块跨站脚本执行漏洞

BUGTRAQ ID: 28957 MiniBB（Minimalistic Bulletin Board）是一个线性的可定制电子布告栏程序。 MiniBB的bbadmin.php文件中没有正确地过滤对whatus参数的输入便返回给了用户，这允许攻击者通过提交恶意HTTP请求导致在用户浏览器会话中执行任意HTML和脚本代码。 MiniBB 2.2a MiniBB ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.minibb.net/authors.html...