CVE-2004-2456

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a userinfo action.

Affected products

Minibb: 1.2, 1.5, 1.6, 1.7, 1.7a, 1.7c

References

http://securitytracker.com/id?1012164
http://www.minibb.net/forums/index.php?action=vthread&forum=1&topic=1767
http://www.minibb.net/forums/index.php?action=vthread&forum=9&topic=1854
http://www.osvdb.org/11711
http://www.securityfocus.com/bid/11688
https://exchange.xforce.ibmcloud.com/vulnerabilities/18080
http://securitytracker.com/id?1012164
http://www.minibb.net/forums/index.php?action=vthread&forum=1&topic=1767
http://www.minibb.net/forums/index.php?action=vthread&forum=9&topic=1854
http://www.osvdb.org/11711
http://www.securityfocus.com/bid/11688
https://exchange.xforce.ibmcloud.com/vulnerabilities/18080

Get alerted when CVE-2004-2456 or the next vulnerability affects your stack