CVE-2006-1090

CVE-2006-1090 concerns PunBB 1.2.10. The vulnerability is described as allowing remote attackers to cause an unspecified denial of service through a flood of new user registrations submitted via register.php. The Connected documents confirm PunBB 1.2.10 as the affected version and point to a patc...

CVE-2006-1089

Cross-site scripting XSS vulnerability in header.php in PunBB 1.2.10 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly handled when the PHPSELF variable is used to handle a punpage tag...

CVE-2006-1090

register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations...

CVE-2006-1089

CVE-2006-1089 affects PunBB 1.2.10, where an XSS flaw resides in header.php. The vulnerability arises when handling the pun_page tag and relies on the PHP_SELF variable, allowing remote attackers to inject arbitrary script/HTML via the URL. The associated NVD entry lists a Medium base impact with...

[SA19039] PunBB "header.php" Cross-Site Scripting Vulnerability

TITLE: PunBB "header.php" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19039 VERIFY ADVISORY: http://secunia.com/advisories/19039/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PunBB 1.x http://secunia.com/product/3700/ DESCRIPTION: A vulnerability...

CVE-2006-0865

PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service resource consumption by registering many user accounts quickly...

Design/Logic Flaw

PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters...

Code injection

PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service resource consumption by registering many user accounts quickly...

CVE-2006-0866

PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters...

CVE-2006-0866

PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters...

CVE-2006-0866

PunBB 1.2.10 and earlier is affected by CVE-2006-0866: remote attackers can perform brute-force password guessing on accounts with passwords as short as 4 characters. The NVD entry assigns a CVSSv2 base score of 5.0 (Medium) with network attack vector, low attack complexity, no authentication req...

CVE-2006-0865

Technical details (affected components/versions, root cause, exploitation specifics, or remediation) are not publicly provided in the connected documents. Initial description notes a DoS via rapid account registrations for PunBB 1.2.10 and earlier. Monitor for updates.

CVE-2006-0865

PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service resource consumption by registering many user accounts quickly...

PunBB1.2.10.txt

/ --------------------------------------------------------------- Neo Security Team NST® PunBB 1.2.10 Multiple DoS Vulnerabilities --------------------------------------------------------------- Program : PunBB 1.2.10 Homepage: http://www.punbb.org Vulnerable Versions: PunBB 1.2.10 & lower ones...

PunBB 1.2.10 Multiple DoS Vulnerabilities

/ --------------------------------------------------------------- Neo Security Team NST® PunBB 1.2.10 Multiple DoS Vulnerabilities --------------------------------------------------------------- Program : PunBB 1.2.10 Homepage: http://www.punbb.org Vulnerable Versions: PunBB 1.2.10 & lower ones...

PunBB <= 2.0.10 (Register Multiple Users) Denial of Service Exploit

No description provided by source. / Name: NST-Exploit Punbb 2.0.10 Denial Of Service Copyright: NeoSecurity Author: K4P0 ./NST-XplPunbb www.victim.com 2.0.0.6 /punbb/ PunBB 2.0.10 Denial of Service exploit by K4P0 Use only at your own reputation risk! ; www.NeoSecurityTeam.net 1 - Trying if...

PunBB <= 2.0.10 (Register Multiple Users) Denial of Service Exploit

Exploit for unknown platform in category web applications =================================================================== PunBB include include ifdef WINDOWS include include // Link to libws232.a else include include include endif define NSTALIVE 1 int Connectchar; void SendPackint, int, char...

PunBB 2.0.10 - Register Multiple Users Denial of Service

PunBB 2.0.10 - Register Multiple Users Denial of Service / Name: NST-Exploit Punbb 2.0.10 Denial Of Service Copyright: NeoSecurity Author: K4P0 ./NST-XplPunbb www.victim.com 2.0.0.6 /punbb/ PunBB 2.0.10 Denial of Service exploit by K4P0 Use only at your own reputation risk! ;...

CVE-2005-4688

PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session...

CVE-2005-4688

CVE-2005-4688 affects PunBB 1.2.9, where changing the account e-mail address does not require password verification, enabling an attacker with a hijacked login session to alter the e-mail associated with the account. Impact is user account compromise via e-mail reassignment; no additional exploit...