CVE-2007-4093

The CVE-2007-4093 issue affects Minb Is Not a Blog (minb). It specifies that sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of the database at db/users.db (containing usernames and encrypted passwords) via a direct request. The description ...

CVE-2008-7005

Minb Is Not a Blog (minb) 0.1.0 is affected by a PHP code-execution flaw in include/modules/top/1-random_quote.php, exploitable via the quotes_to_edit parameter. Remote attackers can run arbitrary PHP code. Some sources note unrestricted file upload as a potential consequence, but the direct issu...