PT-2007-1434 · Minibb · Minibb
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
miniBB module Keyword Replacer (keyword replacer) versions 1.0 and earlier
Description
The issue allows remote attackers to execute arbitrary PHP code via a URL in the
pathToFiles parameter in the addon keywords.php file.Recommendations
For versions 1.0 and earlier, consider restricting access to the
addon keywords.php file or the pathToFiles parameter to minimize the risk of exploitation until a patch is available.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Minibb