I don't even know if it's a new post or not, there's no year mark on post but I wanted to know if this "hole" fixed or not. Just check this out:
blog dot nic0 dot me /post/638007848/dear-cyd-software-labs

sorry I can't paste url.

From the page's source code and google cache: datePublished":"2010-05-27T16:38:00-04:00" ;) MySQL is not used on miniBB any more (MySQLi replaced it).

Batu
I am not sure what this post is about? It is titled "Dear CyD Software Labs..." and so it is related to the guys from this company or whatever. From what I have understood, they were using miniBB as the embedded part of their software (which is allowed since miniBB is released under GPL), and they were putting their own requests into miniBB tables.

How this all is related to miniBB security? We are using completely different methods of data and database manipulation. And our recent version was scanned by Acunetix which is on top of vulnerabilities discovering software, so at least we know it comes without critical holes.

So I am not sure what should we fix and how miniBB could be related to all that.