CVE-2008-2028
published 2008-04-30CVE-2008-2028: miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via a direct request to the glang parameter…
PriorityP49medium4.3CVSS 2.0
AVNACMAuNCPINAN
EXPLOIT
EPSS
2.23%
80.6th percentile
miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via a direct request to the glang parameter in a registernew action to index.php, which leaks the path in an error message.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| minibb | minibb | <= 2.2 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/29997/http://www.minibb.net/forums/9_5110_0.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/42012https://www.exploit-db.com/exploits/5494http://secunia.com/advisories/29997/http://www.minibb.net/forums/9_5110_0.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/42012https://www.exploit-db.com/exploits/5494
2008-04-30
Published