CVE-2007-5719

miniBB 2.1 - SQL Injection via Table Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-5719. PoCs published by irk4z.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in miniBB 2.1 by manipulating the 'table' parameter in the search functionality. It allows an attacker to extract user credentials in hex format from the database when register_globals is enabled.

Description

SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to index.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by irk4z · textwebappsphp
https://www.exploit-db.com/exploits/4587

This exploit demonstrates a SQL injection vulnerability in miniBB 2.1 by manipulating the 'table' parameter in the search functionality. It allows an attacker to extract user credentials in hex format from the database when register_globals is enabled.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: miniBB 2.1
No auth needed
Prerequisites: register_globals = On · target uses miniBB 2.1
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38152
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4587
Various Sources x_refsource_confirm
http://www.minibb.net/forums/9_4888_0.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26249

Scores

EPSS 0.0101
EPSS Percentile 58.4%

Details

CWE
CWE-89
Status published
Products (1)
minibb/minibb 2.1
Published Oct 30, 2007
Tracked Since Feb 18, 2026