NVD

Id
2002  
Name
CVE-2008-2067  
Description
SQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus parameter in a searchusers2 action. NOTE: it was later reported that other versions before 3.0.1 are also vulnerable.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-05-02  
Modified Date
2013-07-31  
Seq
2008-2067  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12848 2002 CVE-2008-2067 20130711 XSS and SQL Injection Vulnerabilities in MiniBB  View
12849 2002 CVE-2008-2067 3846  View
12850 2002 CVE-2008-2067 http://www.minibb.com/download.php?file=minibb_update  View
12851 2002 CVE-2008-2067 http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html  View
12852 2002 CVE-2008-2067 20080428 Minibb 2.2a XSS Vulnerability  View
12853 2002 CVE-2008-2067 61116  View
12854 2002 CVE-2008-2067 minibb-bbadmin-sql-injection(42270)  View
12855 2002 CVE-2008-2067 https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49083 JVNDB-2008-004393 miniBB の bb_admin.php における SQL インジェクションの脆弱性 miniBB の bb_admin.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-2067 32180 CVE-2008-2067 2002 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004393.html 2008-05-02 2012-09-25 View