EUVD-2008-6721

Malware in sbrugna...

PunBB < 1.1.2 install.php XSS

The remote version of PunBB is vulnerable to cross-site scripting flaws through 'install.php' script. With a specially crafted URL, an attacker can inject arbitrary HTML and script code into a user's browser resulting in the possible theft of authentication cookies, mis-representation of site...