NVD

Id
2001  
Name
CVE-2008-2066  
Description
Cross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-05-02  
Modified Date
2013-07-31  
Seq
2008-2066  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12839 2001 CVE-2008-2066 20130711 XSS and SQL Injection Vulnerabilities in MiniBB  View
12840 2001 CVE-2008-2066 3846  View
12841 2001 CVE-2008-2066 http://www.minibb.com/download.php?file=minibb_update  View
12842 2001 CVE-2008-2066 http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html  View
12843 2001 CVE-2008-2066 20080428 Minibb 2.2a XSS Vulnerability  View
12844 2001 CVE-2008-2066 28957  View
12845 2001 CVE-2008-2066 61116  View
12846 2001 CVE-2008-2066 minibb-bbadmin-xss(42076)  View
12847 2001 CVE-2008-2066 https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49082 JVNDB-2008-004392 miniBB の bb_admin.php におけるクロスサイトスクリプティングの脆弱性 miniBB の bb_admin.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-2066 32179 CVE-2008-2066 2001 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004392.html 2008-05-02 2012-09-25 View