172 matches found
CVE-2004-2456
SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a userinfo action...
CVE-2004-2456
CVE-2004-2456 is a SQL injection in miniBB (index.php, userinfo action) affecting miniBB 1.7f and earlier. The vulnerability arises from unsanitized input in the user parameter of index.php, enabling remote attackers to execute arbitrary SQL commands. The connected Nessus/NASL entries reference a...
CVE-2004-2456
SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a userinfo action...
miniBB < 1.7f index.php user Parameter SQL Injection
Binary data 2407.prm...
miniBB index.php user Parameter SQL Injection
The remote host is using the miniBB forum management system. According to its version number, this forum is vulnerable to a SQL injection attack. Input to the 'user' parameter of index.php not properly sanitized. A remote attacker could exploit this to execute arbitrary SQL queries against the...
miniBB Input Validation Hole in 'user' Parameter
No description provided by source. Example: http://target/minibb/index.php?action=userinfo&user=1%20union%20select%201,2,userpassword%20from%20minibbusers/ milw0rm.com 2004-11-16...
MiniBB 1.7f - 'user' SQL Injection
Example: http://target/minibb/index.php?action=userinfo&user=1%20union%20select%201,2,userpassword%20from%20minibbusers/ milw0rm.com 2004-11-16...
MiniBB 1.7f - user SQL Injection
MiniBB 1.7f - user SQL Injection Example: http://target/minibb/index.php?action=userinfo&user=1%20union%20select%201,2,userpassword%20from%20minibbusers/ milw0rm.com 2004-11-16...
miniBB bb_func_usernfo.php Website Name Field XSS
The remote host is using the miniBB forum management system. According to its version number, this forum is vulnerable to a cross-site scripting bug. A remote attacker could exploit this to impersonate a legitimate user by tricking them into requesting a maliciously crafted URL. %NASLMINLEVEL 703...
Cross Site Scripting vulnerability in miniBB 1.7 (latest) and earlier
==================================================================== Advisory by Eye On Security Research Group - India www.eos-india.net ==================================================================== 1...............................................................Product...
MiniBB 1.2 - Cross-Site Scripting
MiniBB 1.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4619/info MiniBB is web forum software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems. MiniBB does not filter script code from URL parameters, making it...
MiniBB 1.2 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/4619/info MiniBB is web forum software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems. MiniBB does not filter script code from URL parameters, making it prone to cross-site scripting...