449 matches found
PunBB < 1.1.2 install.php XSS
The remote version of PunBB is vulnerable to cross-site scripting flaws through 'install.php' script. With a specially crafted URL, an attacker can inject arbitrary HTML and script code into a user's browser resulting in the possible theft of authentication cookies, mis-representation of site...
PunBB URL Quote Tag XSS
According to its banner, the remote version of PunBB is vulnerable to cross-site scripting attacks because the application does not validate URL and quote tags. With a specially crafted URL, an attacker may be able to inject arbitrary HTML and script code into a user's browser, resulting in a los...
PunBB IMG Tag Client Side Scripting XSS
The remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate the IMG tag. With a specially crafted URL, an attacker can cause arbitrary code execution within a user's browser, resulting in a loss of integrity. %NASLMINLEVEL 70300 C Tenable...
PunBB Detection
The remote host is running PunBB, an open source discussion board written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15936; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"PunBB Detection";...
PunBB profile.php XSS
According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script 'profile.php'. With a specially crafted URL, an attacker can inject arbitrary HTML and script code into a user's browser, resulting in a loss of integrity, theft of...
PunBB Search Dropdown Private Forum Disclosure
According to its banner, the remote version of PunBB reportedly may include protected forums in a search dropdown list regardless of whether a user has permissions to view those forums. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
[SA13201] PunBB Private Message System Module Two Vulnerabilities
TITLE: PunBB Private Message System Module Two Vulnerabilities SECUNIA ADVISORY ID: SA13201 VERIFY ADVISORY: http://secunia.com/advisories/13201/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: Private Message System modul...
Nucleus CMS 3.0 Blog:CMS 3 PunBB 1.x - Common.php Remote File Inclusion
Nucleus CMS 3.0 Blog:CMS 3 PunBB 1.x - Common.php Remote File Inclusion source: https://www.securityfocus.com/bid/10760/info Nucleus CMS, Blog:CMS, and PunBB are vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be...
Nucleus CMS 3.0 / Blog:CMS 3 / PunBB 1.x - 'Common.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/10760/info Nucleus CMS, Blog:CMS, and PunBB are vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable computer. Input passed to the 'common.php'...