CVE-2008-2066: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...

CVE-2008-2067: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bbadmin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable...