QwikSec

Security Database

CVE

CWE

Training

CVE-2013-5020

Published: Jul 31, 2013

Modified: Sep 16, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_name, (2) forum_group, (3) forum_icon, or (4) forum_desc parameter. NOTE: the whatus vector is already covered by CVE-2008-2066.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.minibb.com/download.php?file=minibb_update

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_OSVDB

20130711 XSS and SQL Injection Vulnerabilities in MiniBB

mailing-list

x_refsource_FULLDISC

https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/

x_refsource_MISC

http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.