EUVD-2008-2064

Malware in sbrugna...

Sql injection

SQL injection vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...

CVE-2008-2067

SQL injection vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...

MiniBB bb_admin.php模块跨站脚本执行漏洞

BUGTRAQ ID: 28957 MiniBB（Minimalistic Bulletin Board）是一个线性的可定制电子布告栏程序。 MiniBB的bbadmin.php文件中没有正确地过滤对whatus参数的输入便返回给了用户，这允许攻击者通过提交恶意HTTP请求导致在用户浏览器会话中执行任意HTML和脚本代码。 MiniBB 2.2a MiniBB ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.minibb.net/authors.html...