CVE-2005-0818

Cross-site scripting XSS vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the 1 email or 2 Jabber parameters...

CVE-2005-0818

CVE-2005-0818 affects PunBB 1.2.3. The vulnerability is a Cross-site Scripting (XSS) flaw where an attacker can inject arbitrary web script or HTML via the email or Jabber parameters in profile-related input. The connected sources confirm PunBB 1.2.3 as the affected software and specify the vulne...

PunBB profile.php Multiple Parameter XSS

According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script 'profile.php' through the 'email' and 'Jabber' parameters. An attacker could exploit this flaw to embed malicious script or HTML code in his profile. Then, whenever someo...

punBB < 1.2.5 Multiple SQL Injection and Authentication Bypass Vulnerabilities

Binary data 2715.prm...

PunBB 1.2.3 - Multiple HTML Injection Vulnerabilities

PunBB 1.2.3 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/12828/info PunBB is reportedly affected by multiple HTML injection vulnerabilities. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also...

PunBB 1.2.3 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/12828/info PunBB is reportedly affected by multiple HTML injection vulnerabilities. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible such as the theft of cookie-based authentication...

advisory003.txt

============================================== SQL Injections in punbb-1.2.1 moderate.php ============================================== Description ----------- Improper handling of several arguments in moderate.php allows a malicious moderator or admin to inject arbitrary SQL statements. This al...

advisory002.txt

======================================================= Multiple vulnerabilities in punbb-1.2.1 profile.php ======================================================= Description ----------- A remote attacker without an account can set the password of any user on the system to NULL, effectivley...

advisory001.txt

================================================= SQL Injections in punbb-1.2.1 register.php ================================================= Description ----------- A remote attacker can cause register.php to execute arbitrary SQL statements by supplying malicous values to the language or email...

CVE-2005-0569

PunBB 1.2.1 is affected by multiple SQL injection vulnerabilities (CVE-2005-0569) allowing remote attackers to execute arbitrary SQL commands via the language parameter in register.php, the change email feature in profile.php, or the posts/topics parameters in moderate.php. This aligns with the N...

CVE-2005-0570

profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service account lockout by setting the user's password to NULL...

CVE-2005-0570

PunBB 1.2.1 contains a vulnerability in profile.php that allows remote attackers to cause a denial of service (account lockout) by setting a user’s password to NULL. This is the concrete vulnerability described in CVE-2005-0570 across sources (NVD/NIST and CVE list). The connected documents also ...

CVE-2005-0571

PunBB 1.2.1 contains an information-disclosure flaw in admin_loader.php: the plugin parameter allows remote attackers to read arbitrary files. This is a file-read vulnerability (no user authentication required) with a CVSS base score of 5.0 (medium) per NVD, indicating network-remote access and l...

CVE-2005-0569

Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 language parameter to register.php, 2 change email feature in profile.php, 3 posts or 4 topics parameter to moderate.php...

CVE-2005-0571

adminloader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter...

PunBB < 1.2.2 Multiple Input Validation Vulnerabilities

The remote host is running a version of PunBB that fails to properly sanitize user-input to several scripts thereby enabling an attacker to launch various SQL injection attacks. In addition, the profile.php script enables anyone to call the changepass action while specifying the id of an existing...

Multiple vulns in punBB

================================================= SQL Injections in punbb-1.2.1 register.php ================================================= Description ----------- A remote attacker can cause register.php to execute arbitrary SQL statements by supplying malicous values to the language or email...

punBB < 1.2.2 Multiple SQL Injection and Authentication Bypass Vulnerabilities

Binary data 2651.prm...

PunBB 3.03.1 - Multiple Remote Input Validation Vulnerabilities

PunBB 3.03.1 - Multiple Remote Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/12652/info Multiple remote input validation vulnerabilities affect PunBB. These issues are due to a failure of the application to sanitize user-supplied input prior to using it to carry out...

PunBB 3.0/3.1 - Multiple Remote Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/12652/info Multiple remote input validation vulnerabilities affect PunBB. These issues are due to a failure of the application to sanitize user-supplied input prior to using it to carry out critical functions. The first issue is an SQL injection issue in...