MiniBB Mambo Component <= 1.5a Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------------------------- MiniBB Forum Mambo Component = 1.5a Remote File Include Vulnerabilities -----------------------------------------------------------------------------------------------...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in bbadmin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 forumname, 2 forumgroup, 3 forumicon, or 4 forumdesc parameter. NOTE: the whatus vector is already covered by CVE-2008-2066...

CVE-2013-5020

Multiple cross-site scripting XSS vulnerabilities in bbadmin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 forumname, 2 forumgroup, 3 forumicon, or 4 forumdesc parameter. NOTE: the whatus vector is already covered by CVE-2008-2066...

CVE-2013-5020

CVE-2013-5020 describes XSS in MiniBB before 3.0.1 via bb_admin.php parameters (forum_name, forum_group, forum_icon, forum_desc). Connected sources confirm this is a long-standing XSS in MiniBB’s admin area, with prior CVE-2008-2066 covering the whatus parameter. Root cause is inadequate input sa...

MiniBB 3.0.0 Cross Site Scripting / SQL Injection

Information -------------------- Name : XSS and SQL Injection Vulnerabilities in MiniBB Software : MiniBB 3.0.0 and possibly below. Vendor Homepage : http://www.minibb.com Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Omar Kurt Advisory Reference :...

WordPress Plugin miniBB - SQL Injection / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61116/info miniBB is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data...

miniBB 3.x Addon preview Remote File Include Vulnerability

Exploit for php platform in category web applications Exploit Title: miniBB 3.x Addon preview Remote File Include Vulnerability Date: 2013-01-27 Author: bd0rk Vendor or Software Link: http://www.minibb.com/download.php?file=minibbpluginpreview Version: for miniBB 3.x Category:: web applications...

miniBB CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: miniBB CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/minibb/1418/ Category:: webapps Demo : http://minibb.org/minibb-test.php Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today 2018-02-0...

MiniBB 2.5 SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================== MiniBB 2.5 SQL Injection Vulnerability ====================================== Product: MiniBB Vendor: MiniBB.com http://www.minibb.com/ Vulnerable Version: 2.5 Vendor Notification: 21 October 2010...

MiniBB 2.5 Cross Site Scripting / SQL Injection

====================================== Vulnerability ID: HTB22670 Reference: http://www.htbridge.ch/advisory/bbcodexssinminibb.html Product: MiniBB Vendor: MiniBB.com http://www.minibb.com/ Vulnerable Version: 2.5 Vendor Notification: 21 October 2010 Vulnerability Type: XSS Cross Site Scripting...

SQL injection in MiniBB

Vulnerability ID: HTB22671 Reference: http://www.htbridge.ch/advisory/sqlinjectioninminibb.html Product: MiniBB Vendor: MiniBB.com http://www.minibb.com/ Vulnerable Version: 2.5 Vendor Notification: 21 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vend...

MiniBB 2.5 - SQL Injection

MiniBB 2.5 - SQL Injection Vulnerability ID: HTB22671 Reference: http://www.htbridge.ch/advisory/sqlinjectioninminibb.html Product: MiniBB Vendor: MiniBB.com http://www.minibb.com/ Vulnerable Version: 2.5 Vendor Notification: 21 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed,...

BBcode XSS in MiniBB

Vulnerability ID: HTB22670 Reference: http://www.htbridge.ch/advisory/bbcodexssinminibb.html Product: MiniBB Vendor: MiniBB.com http://www.minibb.com/ Vulnerable Version: 2.5 Vendor Notification: 21 October 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...

MiniBB 2.5 - SQL Injection

Vulnerability ID: HTB22671 Reference: http://www.htbridge.ch/advisory/sqlinjectioninminibb.html Product: MiniBB Vendor: MiniBB.com http://www.minibb.com/ Vulnerable Version: 2.5 Vendor Notification: 21 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vend...

Multiple Vulnerabilities in MiniBB

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in MiniBB which could be exploited to perform script insertion and SQL injection attacks. 1 Script insertion vulnerability in MiniBB Input passed to the "url" BBCode tag is not properly sanitized. A remote attacker...

MiniBB PathToFiles Parameter Remote File Include Vulnerability

The remote web server contains a PHP script that is affected by a remote file include issue. Description: The remote web server is running MiniBB, an open source forum software. The version of MiniBB installed on the remote host fails to sanitize input to the 'pathToFiles' parameter before using ...

MiniBB PathToFiles Parameter Remote File Include Vulnerability

The remote web server is running MiniBB, an open source forum software which is affected by a remote file include issue. SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

miniBB RSS插件远程文件包含漏洞

BUGTRAQ ID: 30421 CNCAN ID：CNCAN-2008073001 miniBB是一款基于PHP的论坛程序。 miniBB不正确过滤用户提交的参数，远程攻击者可以利用漏洞以WEB进程权限执行任意PHP代码。 miniBB包含的RSS插件脚本不正确过滤用户提交的WEB参数，指定远程服务器上的任意文件作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Paul Puzyrev RSS 2.0 目前没有解决方案提供： http://www.minibb.com/download.htmladdons...

minibbrss-rfi.txt

plugin Rss Remote File Inclusion Vulnerability Ghost Hacker, http://gh0st10.wordpress.com |, .-. .-. ,| | o/ \o | R-H team |/ /\ | Found by : Ghost Hacker HomePage : real-hack.net Email : [email protected] Name Script : plugin Rss Download Script :...

MiniBB RSS 2.0 Plugin - Multiple Remote File Inclusions

MiniBB RSS 2.0 Plugin - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/30421/info The RSS plugin for miniBB is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attack...