Lucene search

K
prionPRIOn knowledge basePRION:CVE-2007-2236
HistoryApr 25, 2007 - 3:19 p.m.

Cross site scripting

2007-04-2515:19:00
PRIOn knowledge base
www.prio-n.com
1

6.4 Medium

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.8%

footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting (XSS) attack, or via the pun_include tag, as demonstrated by use of admin_options.php to execute PHP code from an uploaded avatar file.

CPENameOperatorVersion
punbble1.2.14

6.4 Medium

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.8%

Related for PRION:CVE-2007-2236