Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection attacks via the code parameter in an unsubscribe action to index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MiniBB SQL注入漏洞
Vulnerability Description
MiniBB（全称Minimalistic Bulletin Board）是一套免费、开源的互联网论坛软件。该软件支持多种论坛样式、多界面语言、多时区、插件扩展等。 MiniBB 3.1及之前版本的bb_func_unsub.php脚本中存在安全漏洞，该漏洞源于程序使用错误的正则表达式。远程攻击者可借助unsubscribe操作中的‘code’参数利用该漏洞实施SQL注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A