Skip to content
Noroxi

minibb records

18 published records for vendor minibb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
11
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2006-7156
    41Plan

    PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a module for miniBB, a

    CriticalCVSS 10.0Proof of conceptEPSS 4%

    minibb · keyword replacerMar 7, 2007

  • CVE-2006-7153
    41Plan

    PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pa

    CriticalCVSS 10.0No exploitEPSS 3%

    minibb · forumMar 7, 2007

  • CVE-2006-3955
    33Monitor

    Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in th

    HighCVSS 7.5Proof of conceptEPSS 9%

    minibb · minibbAug 1, 2006

  • CVE-2007-2317
    32Monitor

    Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other produc

    HighCVSS 7.5Proof of conceptEPSS 8%

    minibb · minibbApr 26, 2007

  • CVE-2007-3272
    32Monitor

    Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a ..

    HighCVSS 7.8Proof of conceptEPSS 2%

    minibb · minibbJun 19, 2007

  • CVE-2006-3690
    31Monitor

    Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via

    HighCVSS 7.5Proof of conceptEPSS 3%

    minibb · forumJul 21, 2006

  • CVE-2004-2456
    31Monitor

    SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user p

    HighCVSS 7.5Proof of conceptEPSS 2%

    minibb · minibbDec 31, 2004

  • CVE-2008-2067
    30Monitor

    SQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus paramete

    HighCVSS 7.5No exploitEPSS 1%

    minibb · minibbMay 2, 2008

  • CVE-2006-5674
    30Monitor

    Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when register_globals is enabled, allow remote attackers to

    HighCVSS 7.5No exploitEPSS 1%

    minibb · minibbNov 2, 2006

  • CVE-2014-9254
    30Monitor

    bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection

    HighCVSS 7.5Proof of conceptEPSS 1%

    minibb · minibbDec 31, 2014

  • CVE-2007-5719
    30Monitor

    SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table para

    HighCVSS 7.5Proof of conceptEPSS 1%

    minibb · minibbOct 30, 2007

  • CVE-2006-5673
    29Monitor

    PHP remote file inclusion vulnerability in bb_func_txt.php in miniBB 2.0.2 and earlier, when register_globals is enabled, allows remote atta

    MediumCVSS 6.8Proof of conceptEPSS 6%

    minibb · minibbNov 2, 2006

  • CVE-2008-2029
    27Monitor

    Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earlier, when register_gl

    MediumCVSS 6.8Proof of conceptEPSS 0%

    minibb · minibbApr 30, 2008

  • CVE-2018-6506
    19Monitor

    Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribut

    MediumCVSS 4.8No exploitEPSS 0%

    minibb · minibbFeb 12, 2018

  • CVE-2008-2028
    18Monitor

    miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via a direct request to

    MediumCVSS 4.3Proof of conceptEPSS 2%

    minibb · minibbApr 30, 2008

  • CVE-2013-5020
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web sc

    MediumCVSS 4.3Proof of conceptEPSS 1%

    minibb · minibbJul 31, 2013

  • CVE-2008-2066
    17Monitor

    Cross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via t

    MediumCVSS 4.3No exploitEPSS 1%

    minibb · minibbMay 2, 2008

  • CVE-2008-2024
    17Monitor

    Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote a

    MediumCVSS 4.3Proof of conceptEPSS 1%

    minibb · minibbApr 30, 2008