header-logo
Suggest Exploit
vendor:
MiniBB
by:
SecurityFocus
7.5
CVSS
HIGH
Cross-Site Scripting
79
CWE
Product Name: MiniBB
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Unix, Linux, Windows
2002

MiniBB Cross-Site Scripting Vulnerability

MiniBB does not filter script code from URL parameters, making it prone to cross-site scripting attacks. This may enable a remote attacker to steal cookie-based authentication credentials from legitimate users of a website running MiniBB.

Mitigation:

Filter script code from URL parameters.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/4619/info

MiniBB is web forum software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems.

MiniBB does not filter script code from URL parameters, making it prone to cross-site scripting attacks.

This may enable a remote attacker to steal cookie-based authentication credentials from legitimate users of a website running MiniBB. 

http://target/forums/index.php?action=search&searchFor="><script>alert("test")</script >

Navigation

Suggest Exploit

Services By CQR