Browse CVEs

HIGH 7.5 CVE-2014-9254 bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection attacks … Minibb after 3.1 Fix from $1,9502014-12-31 HIGH 7.5 CVE-2008-2067 SQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a se… Minibb Mitigation only Fix from $1,9502008-05-02 MEDIUM 6.8 CVE-2008-2029 Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earlier, when register_globals is … Minibb after 2.2 Fix from $1,6002008-04-30 HIGH 7.5 CVE-2007-5719 SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to … Minibb No fix yet Fix from $1,9502007-10-30 HIGH 7.8 CVE-2007-3272 Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the language par… Minibb No fix yet Fix from $1,9502007-06-19 HIGH 7.5 CVE-2007-2317EPSS 8% Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow… Minibb after 4.0.12 Fix from $1,9502007-04-26 HIGH 10.0 CVE-2006-7153 PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles… Forum Mitigation only Fix from $1,9502007-03-07 HIGH 10.0 CVE-2006-7156 PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a module for miniBB, allows rem… Keyword Replacer after 1.0 Fix from $1,9502007-03-07 HIGH 7.5 CVE-2006-5674 Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when register_globals is enabled, allow remote attackers to execute a… Minibb after 2.0.2 Fix from $1,9502006-11-03 MEDIUM 6.8 CVE-2006-5673EPSS 6% PHP remote file inclusion vulnerability in bb_func_txt.php in miniBB 2.0.2 and earlier, when register_globals is enabled, allows remote attackers to … Minibb after 2.0.2 Fix from $1,6002006-11-03 HIGH 7.5 CVE-2006-3955EPSS 10% Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolut… Minibb No fix yet Fix from $1,9502006-08-01 HIGH 7.5 CVE-2006-3690 Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via a URL in… Forum No fix yet Fix from $1,9502006-07-21 HIGH 7.5 CVE-2004-2456 SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter … Minibb Patch available Fix from $1,9502004-12-31