Page 3 of 14 results (0.010 seconds)

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0

CVE-2006-5674

https://notcve.org/view.php?id=CVE-2006-5674

Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter to (1) bb_func_forums.php, (2) bb_functions.php, or (3) the RSS plugin. Vulnerabilidades múltiples de inclusión remota de archivo en PHP miniBB 2.0.2 y versiones anteriores, cuando register_globals está habilitado, permiten a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro pathToFiles en (1) bb_func_forums.php, (2) bb_functions.php, ó (3) el plugin RSS. • http://osvdb.org/33963 http://osvdb.org/33964 http://osvdb.org/33965 http://www.minibb.net/forums/9_4274_0.html •

CVSS: 6.8EPSS: 16%CPEs: 1EXPL: 3

CVE-2006-5673 – MiniBB 2.0.2 - 'bb_func_txt.php' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2006-5673

PHP remote file inclusion vulnerability in bb_func_txt.php in miniBB 2.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter. Vulnerabilidad de inclusión remota de archivo en PHP en bb_func_txt.php de miniBB 2.0.2 y versiones anteriores cuando register_globals está habilitado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro pathToFiles. • https://www.exploit-db.com/exploits/2655 http://secunia.com/advisories/22596 http://www.minibb.net/forums/9_4274_0.html http://www.osvdb.org/29971 http://www.securityfocus.com/bid/20757 http://www.vupen.com/english/advisories/2006/4222 https://exchange.xforce.ibmcloud.com/vulnerabilities/29831 •

CVSS: 7.5EPSS: 16%CPEs: 1EXPL: 4

CVE-2006-3955 – MiniBB 1.5 - 'news.php' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2006-3955

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) news.php, (2) search.php, or (3) whosOnline.php. Múltiples vulnerabilidades PHP de inclusión remota de archivo en MiniBB Forum 1.5a permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro absolute_path en (1) news.php, (2) search.php, o (3) whosOnline.php. • https://www.exploit-db.com/exploits/28251 http://securityreason.com/securityalert/1315 http://securitytracker.com/id?1016557 http://securitytracker.com/id?1016558 http://www.osvdb.org/28674 http://www.osvdb.org/28675 http://www.osvdb.org/28676 http://www.securityfocus.com/archive/1/440839/100/100/threaded http://www.securityfocus.com/archive/1/440875/100/100/threaded http://www.securityfocus.com/bid/19095 https://exchange.xforce.ibmcloud.com/vulnerabilities/27905 •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 4

CVE-2004-2456 – MiniBB 1.7f - 'user' SQL Injection

https://notcve.org/view.php?id=CVE-2004-2456

SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a userinfo action. • https://www.exploit-db.com/exploits/635 http://securitytracker.com/id?1012164 http://www.minibb.net/forums/index.php?action=vthread&forum=1&topic=1767 http://www.minibb.net/forums/index.php?action=vthread&forum=9&topic=1854 http://www.osvdb.org/11711 http://www.securityfocus.com/bid/11688 https://exchange.xforce.ibmcloud.com/vulnerabilities/18080 •