CVE-2008-2028

miniBB < 2.2 - Exposure of Sensitive Information via glang Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-2028. PoCs published by girex.

AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in miniBB 2.2, including Full Path Disclosure, Cross-Site Scripting (XSS), and Remote SQL Injection. The SQL Injection PoC retrieves admin credentials or sensitive files via UNION-based attacks, requiring register_globals to be enabled.

Description

miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via a direct request to the glang parameter in a registernew action to index.php, which leaks the path in an error message.

Exploits (1)

exploitdb WORKING POC VERIFIED
by girex · textwebappsphp
https://www.exploit-db.com/exploits/5494

This exploit demonstrates multiple vulnerabilities in miniBB 2.2, including Full Path Disclosure, Cross-Site Scripting (XSS), and Remote SQL Injection. The SQL Injection PoC retrieves admin credentials or sensitive files via UNION-based attacks, requiring register_globals to be enabled.

Classification
Working Poc 90%
Attack Type
Sqli | Xss | Info Leak
Complexity
Moderate
Reliability
Reliable
Target: miniBB 2.2 (and prior versions)
No auth needed
Prerequisites: register_globals = On · target running miniBB 2.2 or prior
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42012
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5494
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29997/

Scores

EPSS 0.0223
EPSS Percentile 80.5%

Details

CWE
CWE-200
Status published
Products (1)
minibb/minibb < 2.2
Published Apr 30, 2008
Tracked Since Feb 18, 2026