Cross site scripting

Cross-site scripting XSS vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...

Sql injection

SQL injection vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...

CVE-2008-2066

CVE-2008-2066 is a cross‑site scripting (XSS) vulnerability in miniBB’s admin path: bb_admin.php, exploitable via the whatus parameter in the searchusers2 action. Affected: miniBB 2.2a and other versions prior to 3.0.1. Attack vector is remote, enabling injection of arbitrary script/HTML; impact ...