QwikSec

Security Database

CVE

CWE

Training

CVE-2008-2066

Published: May 2, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.minibb.com/download.php?file=minibb_update

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_OSVDB

third-party-advisory

x_refsource_SECUNIA

20080428 Minibb 2.2a XSS Vulnerability

mailing-list

x_refsource_BUGTRAQ

20130711 XSS and SQL Injection Vulnerabilities in MiniBB

mailing-list

x_refsource_FULLDISC

https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/

x_refsource_MISC

vdb-entry

x_refsource_BID

http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html

x_refsource_CONFIRM

minibb-bbadmin-xss(42076)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SREASON

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.