449 matches found
CVE-2021-28968
An issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the email BBcode tag allows with authentication injecting arbitrary JavaScript into any forum message...
CVE-2021-28968
PunBB prior to 1.4.6 is affected by a Cross‑Site Scripting (XSS) flaw in the [email] BBCode tag. The vulnerability allows an authenticated attacker to inject arbitrary JavaScript into forum messages. Root cause is an XSS in the way the [email] tag is processed, enabling script injection with user...
Ashcs punbb 跨站脚本漏洞
PunBB is a lightweight PHP-based forum system distributed under the GNU General Public License. A cross-site scripting vulnerability exists in the email BBcode tag in versions of PunBB prior to 1.4.6. An attacker can exploit this vulnerability to inject arbitrary JavaScript into any forum message...
PunBB Database Leakage Vulnerability
PunBB is a PHP-based forum program. PunBB has security vulnerabilities. An attacker can exploit the vulnerability to obtain sensitive database information...
PunBB 1.4.4 Database Disclosure
From https://j.ludost.net/blog/archives/2019/11/11/minorsecurityissueinpunbbwithsqlite/index.html Minor security issue in punbb with SQLite Georgi Guninski security advisory 76, 2019 Running punbb-master from https://github.com/punbb/punbb from Thu 07 Nov 2019 11:23:33 AM UTC Installing on...
PunBB Reputation.php Mod <= 2.0.4 - Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Reputation.php Mod = v2.0.4 Local File Inclusion Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew registerglobals = On magicquotesgpc = On use LWP::UserAgent; use HTTP::Cookies; use strict; my $EtcPassw...
PunBB Extension Attachment <= 1.0.2 - SQL Injection
No description provided by source. !/usr/bin/php ?php printr' +-------------------------------------------------------------------------- -+ Punbb Extension Attachment = v1.0.2 Bind SQL injection exploit by purett mail: puretot at gmail dot com team: http://www.wolvez.org dork: Powered by PunBB...
PunBB 1.x Profile.PHP User Profile Edit Module SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14195/info PunBB is affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input through the user profile edit module of the 'profile.php' script...
PunBB <= 1.2.14 Remote Code Execution Exploit
No description provided by source...
PunBB Mod PunPortal 0.1 - Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl =about PunBB PunPortal 0.1 Local File Inclusion Exploit -------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/download.php?id=1108 download cms http://punbb.org register globals = 1...
PunBB Reputation.php Mod <= 2.0.4 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Reputation.php Mod = v2.0.4 Remote Blind SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew use strict; use LWP::UserAgent; use HTTP::Cookies; use HTTP::Request::Common; use Time::HiRes; use...
PunBB Extension Vote For Us <= 1.0.1 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod = v1.0.1 Remote Blind SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Download: http://www.punres.org/desc.php?pid=378 use strict; use LWP::UserAgent; use...
PunBB 3.0/3.1 - Multiple Remote Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12652/info Multiple remote input validation vulnerabilities affect PunBB. These issues are due to a failure of the application to sanitize user-supplied input prior to using it to carry out critical functions. The first...
PHP < 4.5.0 - unserialize Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Punbb 1.3.4 - Multiple Full Path Disclosure Vulnerability
No description provided by source. Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in the file...
PunBB version <= 1.2.2 - Authentication Bypass Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; PunBB version = 1.2.2 auth bypass exploit ------------------------------------------------- About vuln: lets look file /include/functions.php code start function checkcookie&$punuser ... if isset$COOKIE$cookiename...
PunBB <= 1.3.4 & Pun_PM <= 1.2.6 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB = 1.3. Package: PunPM = v1.2.6 Remote Blind SQL Injection Exploit Author/s: Dante90, WaRWolFz Crew Created: 2009.07.30 after 0 days the bug was discovered. Crew Members: 4lasthor, Andryxxx, Cod3, Gho5t, HeRtZ, N.o.3.X, RingZero,...
PunBB <= 2.0.10 (Register Multiple Users) Denial of Service Exploit
No description provided by source. / Name: NST-Exploit Punbb 2.0.10 Denial Of Service Copyright: NeoSecurity Author: K4P0 ./NST-XplPunbb www.victim.com 2.0.0.6 /punbb/ PunBB 2.0.10 Denial of Service exploit by K4P0 Use only at your own reputation risk! ; www.NeoSecurityTeam.net 1 - Trying if...
PunBB 1.2.3 - Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12828/info PunBB is reportedly affected by multiple HTML injection vulnerabilities. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible such as the...
PunBB Affiliates Mod <= 1.1 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod = v1.1 Remote Blind SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90 & UltraSound, WaRWolFz Crew Product: http://www.punres.org/desc.php?pid=328 use strict; use LWP::UserAgent; u...