CVE-2008-7005: Minb Is Not A Blog

High severity, CVSS 7.5. EPSS: 9.1% chance of exploitation in the next 30 days.

include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary PHP code via the quotes_to_edit parameter. NOTE: this issue has been reported as an unrestricted file upload by some sources, but that is a potential consequence of code execution.

Affected products

• Minb Minb Is Not A Blog: version 0.1.0 only

Published 2009-08-19. Last modified 2026-06-16.