Every CVE Search/ Get API key

CVE-2005-3079

PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language...

4.6 Medium

PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.

Exploit likelihood

0.89%Down 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.6

PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.

Record
CVE-2005-3079
CVSS 2.0
4.6 MediumAV:N/AC:H/Au:S/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.

Record
CVE-2005-3079
Updated
2026-11-02
EUVDEUVD-2005-3079 No score

PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.

Record
EUVD-2005-3079
Updated
2026-11-03
GitHub AdvisoriesGHSA-9wm4-3c82-wjrj No score

PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language...

PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.

Record
GHSA-9wm4-3c82-wjrj
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-3079 is a medium vulnerability (CVSS 4.6) in Punbb, published September 27, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.89%, the 59th percentile. No source names a fixed version.

References

MoveEnter Open