CVE-2009-4894

2022-10-0316:24:04

redhat

www.cve.org

cross-site scripting

punbb

profile.php

password

e-mail

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in profile.php in PunBB before 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) password or (2) e-mail.

References

punbb.informer.com/forums/topic/21669/punbb-134/