EUVD-2006-1093

Malware in sbrugna...

Design/Logic Flaw

register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations...

CVE-2006-1090

register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations...

CVE-2006-1089

Cross-site scripting XSS vulnerability in header.php in PunBB 1.2.10 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly handled when the PHPSELF variable is used to handle a punpage tag...

CVE-2006-1089

CVE-2006-1089 affects PunBB 1.2.10, where an XSS flaw resides in header.php. The vulnerability arises when handling the pun_page tag and relies on the PHP_SELF variable, allowing remote attackers to inject arbitrary script/HTML via the URL. The associated NVD entry lists a Medium base impact with...

CVE-2006-1090

register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations...

Code injection

PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service resource consumption by registering many user accounts quickly...