CVE-2004-2456

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a userinfo action.

Affected (6)

Products: Minibb: Minibb

Minibb

1 product

Minibb

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Minibb Minibb	Version 1.2
Minibb Minibb	Version 1.5
Minibb Minibb	Version 1.6
Minibb Minibb	Version 1.7
Minibb Minibb	Version 1.7a
Minibb Minibb	Version 1.7c

References (12)

http://securitytracker.com/id?1012164

Source: cve@mitre.org

ExploitPatch

http://www.minibb.net/forums/index.php?action=vthread&forum=1&topic=1767

Source: cve@mitre.org

http://www.minibb.net/forums/index.php?action=vthread&forum=9&topic=1854

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/11711

Source: cve@mitre.org

ExploitPatch

http://www.securityfocus.com/bid/11688

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/18080

Source: cve@mitre.org

http://securitytracker.com/id?1012164