minibb kayıtları
minibb üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 11
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2006-7156Kavram kanıtı | PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a module for miniBB, aminibb · keyword replacer | Kritik10,0 | — | %4,9 | 7 Mar 2007 |
41Planlayın | CVE-2006-7153İstismar yok | PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the paminibb · forum | Kritik10,0 | — | %3,8 | 7 Mar 2007 |
33İzleyin | CVE-2006-3955Kavram kanıtı | Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in thminibb · minibb | Yüksek7,5 | — | %9,8 | 1 Ağu 2006 |
32İzleyin | CVE-2007-2317Kavram kanıtı | Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other producminibb · minibb | Yüksek7,5 | — | %8,0 | 26 Nis 2007 |
32İzleyin | CVE-2007-3272Kavram kanıtı | Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a ..minibb · minibb | Yüksek7,8 | — | %2,8 | 19 Haz 2007 |
31İzleyin | CVE-2006-3690Kavram kanıtı | Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code viaminibb · forum | Yüksek7,5 | — | %3,8 | 21 Tem 2006 |
31İzleyin | CVE-2004-2456Kavram kanıtı | SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user pminibb · minibb | Yüksek7,5 | — | %2,7 | 31 Ara 2004 |
30İzleyin | CVE-2008-2067İstismar yok | SQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameteminibb · minibb · CWE-89 | Yüksek7,5 | — | %1,6 | 2 May 2008 |
30İzleyin | CVE-2006-5674İstismar yok | Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when register_globals is enabled, allow remote attackers to minibb · minibb | Yüksek7,5 | — | %1,5 | 2 Kas 2006 |
30İzleyin | CVE-2014-9254Kavram kanıtı | bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injectionminibb · minibb · CWE-89 | Yüksek7,5 | — | %1,3 | 31 Ara 2014 |
30İzleyin | CVE-2007-5719Kavram kanıtı | SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table paraminibb · minibb · CWE-89 | Yüksek7,5 | — | %1,0 | 30 Eki 2007 |
29İzleyin | CVE-2006-5673Kavram kanıtı | PHP remote file inclusion vulnerability in bb_func_txt.php in miniBB 2.0.2 and earlier, when register_globals is enabled, allows remote attaminibb · minibb | Orta6,8 | — | %6,1 | 2 Kas 2006 |
27İzleyin | CVE-2008-2029Kavram kanıtı | Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earlier, when register_glminibb · minibb · CWE-89 | Orta6,8 | — | %1,0 | 30 Nis 2008 |
19İzleyin | CVE-2018-6506İstismar yok | Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attributminibb · minibb · CWE-79 | Orta4,8 | — | %0,5 | 12 Şub 2018 |
18İzleyin | CVE-2008-2028Kavram kanıtı | miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via a direct request to minibb · minibb · CWE-200 | Orta4,3 | — | %2,2 | 30 Nis 2008 |
18İzleyin | CVE-2013-5020Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web scminibb · minibb · CWE-79 | Orta4,3 | — | %1,9 | 31 Tem 2013 |
17İzleyin | CVE-2008-2066İstismar yok | Cross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via tminibb · minibb · CWE-79 | Orta4,3 | — | %1,6 | 2 May 2008 |
17İzleyin | CVE-2008-2024Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote aminibb · minibb · CWE-79 | Orta4,3 | — | %1,5 | 30 Nis 2008 |
- CVE-2006-715641Planlayın
PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a module for miniBB, a
KritikCVSS 10,0Kavram kanıtıEPSS %5minibb · keyword replacer7 Mar 2007
- CVE-2006-715341Planlayın
PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pa
KritikCVSS 10,0İstismar yokEPSS %4minibb · forum7 Mar 2007
- CVE-2006-395533İzleyin
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in th
YüksekCVSS 7,5Kavram kanıtıEPSS %10minibb · minibb1 Ağu 2006
- CVE-2007-231732İzleyin
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other produc
YüksekCVSS 7,5Kavram kanıtıEPSS %8minibb · minibb26 Nis 2007
- CVE-2007-327232İzleyin
Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a ..
YüksekCVSS 7,8Kavram kanıtıEPSS %3minibb · minibb19 Haz 2007
- CVE-2006-369031İzleyin
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via
YüksekCVSS 7,5Kavram kanıtıEPSS %4minibb · forum21 Tem 2006
- CVE-2004-245631İzleyin
SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user p
YüksekCVSS 7,5Kavram kanıtıEPSS %3minibb · minibb31 Ara 2004
- CVE-2008-206730İzleyin
SQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus paramete
YüksekCVSS 7,5İstismar yokEPSS %2minibb · minibb2 May 2008
- CVE-2006-567430İzleyin
Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when register_globals is enabled, allow remote attackers to
YüksekCVSS 7,5İstismar yokEPSS %1minibb · minibb2 Kas 2006
- CVE-2014-925430İzleyin
bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection
YüksekCVSS 7,5Kavram kanıtıEPSS %1minibb · minibb31 Ara 2014
- CVE-2007-571930İzleyin
SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table para
YüksekCVSS 7,5Kavram kanıtıEPSS %1minibb · minibb30 Eki 2007
- CVE-2006-567329İzleyin
PHP remote file inclusion vulnerability in bb_func_txt.php in miniBB 2.0.2 and earlier, when register_globals is enabled, allows remote atta
OrtaCVSS 6,8Kavram kanıtıEPSS %6minibb · minibb2 Kas 2006
- CVE-2008-202927İzleyin
Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earlier, when register_gl
OrtaCVSS 6,8Kavram kanıtıEPSS %1minibb · minibb30 Nis 2008
- CVE-2018-650619İzleyin
Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribut
OrtaCVSS 4,8İstismar yokEPSS %1minibb · minibb12 Şub 2018
- CVE-2008-202818İzleyin
miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via a direct request to
OrtaCVSS 4,3Kavram kanıtıEPSS %2minibb · minibb30 Nis 2008
- CVE-2013-502018İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web sc
OrtaCVSS 4,3Kavram kanıtıEPSS %2minibb · minibb31 Tem 2013
- CVE-2008-206617İzleyin
Cross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via t
OrtaCVSS 4,3İstismar yokEPSS %2minibb · minibb2 May 2008
- CVE-2008-202417İzleyin
Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote a
OrtaCVSS 4,3Kavram kanıtıEPSS %2minibb · minibb30 Nis 2008