CVE-2005-4686

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregisterglobals function, which allows attackers to obtain unspecified sensitive information...

CVE-2005-4687

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header...

CVE-2005-4686

PunBB 1.2.9 (often with F-ART BLOG:CMS) includes config.php before calling unregister_globals, enabling exposure of unspecified sensitive information. Root cause: premature/configuration sequencing in the initialization flow. Impact is limited to information disclosure; no explicit vector or expl...

CVE-2005-4687

PunBB 1.2.9 (used standalone or with F-ART BLOG:CMS) trusts the client IP from the X-Forwarded-For header instead of the TCP/IP stack, enabling IP address spoofing by remote attackers. Red Hat and CVE records corroborate this vulnerability in PunBB 1.2.9. The underlying issue is header-based IP e...

CVE-2005-4665

CVE-2005-4665 describes an XSS in PunBB 1.2.6 and earlier, where remote attackers can inject arbitrary script/HTML via Javascript contained in nested, malformed BBCode url tags in posts. The vulnerability stems from insufficient sanitization of the url BBCode before rendering, enabling a script e...

CVE-2005-4665

Cross-site scripting XSS vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags...

PunBB BBCode URL Tag Script Injection Vulnerability

NightWarriorKurdish Hacker nightwarrior771athotmail.com PunBB BBCode URL Tag Script Injection Vulnerability Contact :nightwarrior771athotmail.com Vulnerable:...

CVE-2005-4687

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header...

CVE-2005-4686

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregisterglobals function, which allows attackers to obtain unspecified sensitive information...

CVE-2005-4688

PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session...

CVE-2005-4665

Cross-site scripting XSS vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags...

CVE-2005-3518

SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the oldsearches parameter...

CVE-2005-3518

The CVE-2005-3518 entry affects PunBB 1.2.7 and 1.2.8, where the search.php script unsafely handles the old_searches parameter, enabling remote SQL injection. The underlying cause is improper input handling in the database query, allowing arbitrary SQL execution by an attacker. Impact is document...

PunBB IMG Tag Client Side Scripting XSS

The remote web server contains a PHP application that is affected by a cross-site scripting vulnerability. Description : The remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate IMG tag. With a specially crafted URL, an attacker can cause...

PunBB install.php XSS

The remote web server contains a PHP application that is affected by several cross-site scripting vulnerabilities. Description : The remote version of PunBB is vulnerable to cross-site scripting flaws through 'install.php' script. With a specially-crafted URL, an attacker can inject arbitrary HTM...

PunBB install.php XSS

The remote version of PunBB is vulnerable to cross-site scripting flaws through SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PunBB URL Quote Tag XSS

According to its banner, the remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate URL and quote tags. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

PunBB profile.php XSS

According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PunBB detection

The remote web server contains a database management application written in PHP. Description : This script detects whether the remote host is running PunBB and extracts the version number and location if found. PunBB is an open-source discussion board written in PHP. OpenVAS Vulnerability Test $I...

PunBB detection

The remote web server contains a database management application written in PHP. Description : This script detects whether the remote host is running PunBB and extracts the version number and location if found. PunBB is an open-source discussion board written in PHP. SPDX-FileCopyrightText: 2005...