Punbb vulnerabilities

Products

• Punbb 41

Newest

• punbb Multiple cross-site scripting (XSS) vulnerabilities in include/functions.php in PunBB before 1.3... CVE-2011-3371 4.3 MediumOctober 2, 2011
• punbb Multiple cross-site scripting (XSS) vulnerabilities in profile.php in PunBB before 1.3.4 allow... CVE-2009-4894 4.3 MediumJune 15, 2010
• punbb Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote... CVE-2010-0455 4.3 MediumJanuary 28, 2010
• punbb Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to... CVE-2008-7241 6.8 MediumSeptember 17, 2009
• punbb private messaging system Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier... CVE-2008-6308 Public exploit 5.1 MediumFebruary 27, 2009
• punbb Cross-site scripting (XSS) vulnerability in moderate.php in PunBB before 1.3.1 allows remote... CVE-2008-5435 4.3 MediumDecember 11, 2008
• punbb Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated... CVE-2008-5434 6.5 MediumDecember 11, 2008
• punbb Cross-site scripting (XSS) vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote... CVE-2008-5433 4.3 MediumDecember 11, 2008
• punbb Cross-site scripting (XSS) vulnerability in userlist.php in PunBB before 1.2.20 allows remote... CVE-2008-3968 4.3 MediumSeptember 10, 2008
• punbb Multiple cross-site scripting (XSS) vulnerabilities in PunBB before 1.2.19 allow remote attackers... CVE-2008-3336 4.3 MediumJuly 27, 2008
• punbb Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP... CVE-2008-3335 10.0 HighJuly 27, 2008
• punbb Cross-site scripting (XSS) vulnerability in PunBB 1.2.16 and earlier allows remote attackers to... CVE-2008-1485 4.3 MediumMarch 24, 2008
• punbb The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on... CVE-2008-1484 Public exploit 3.5 LowMarch 24, 2008
• punbb footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include... CVE-2007-2236 6.8 MediumApril 25, 2007
• punbb Multiple cross-site scripting (XSS) vulnerabilities in PunBB 1.2.14 and earlier allow remote... CVE-2007-2235 4.3 MediumApril 25, 2007
• punbb include/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled ini_get... CVE-2007-2234 7.5 HighApril 25, 2007
• punbb Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated... CVE-2006-5738 2.1 LowNovember 6, 2006
• punbb PunBB uses a predictable cookie_seed value that can be derived from the time of registration of... CVE-2006-5737 7.2 HighNovember 6, 2006
• punbb SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is... CVE-2006-5736 5.1 MediumNovember 6, 2006
• punbb Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote... CVE-2006-5735 EPSS 14.4% 7.5 HighNovember 6, 2006
• punbb PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows... CVE-2006-4759 3.6 LowSeptember 13, 2006
• punbb Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated... CVE-2006-2724 6.8 MediumJune 1, 2006
• punbb Cross-site scripting (XSS) vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to... CVE-2006-2227 4.3 MediumMay 5, 2006
• punbb register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service... CVE-2006-1090 Public exploit 7.8 HighMarch 9, 2006
• punbb Cross-site scripting (XSS) vulnerability in header.php in PunBB 1.2.10 allows remote attackers to... CVE-2006-1089 4.3 MediumMarch 9, 2006
• punbb PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an... CVE-2006-0866 5.0 MediumFebruary 23, 2006
• punbb PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource... CVE-2006-0865 Public exploit 5.0 MediumFebruary 23, 2006
• punbb PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's... CVE-2005-4688 5.0 MediumDecember 31, 2005
• punbb, f-art agency blog cms +1 more PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in... CVE-2005-4687 5.0 MediumDecember 31, 2005
• punbb PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the... CVE-2005-4686 5.0 MediumDecember 31, 2005
• punbb Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to... CVE-2005-4665 4.3 MediumDecember 31, 2005
• punbb SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to... CVE-2005-3518 Public exploit 7.5 HighNovember 6, 2005
• punbb PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote... CVE-2005-3328 7.5 HighOctober 27, 2005
• punbb PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language... CVE-2005-3079 4.6 MediumSeptember 27, 2005
• punbb Cross-site scripting (XSS) vulnerability in PunBB before 1.2.8 allows remote attackers to inject... CVE-2005-3078 4.3 MediumSeptember 27, 2005
• punbb SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and... CVE-2005-2193 7.5 HighJuly 10, 2005
• punbb SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to... CVE-2005-1051 Public exploit 6.5 MediumApril 12, 2005
• punbb Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject... CVE-2005-1072 4.3 MediumApril 8, 2005
• punbb Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject... CVE-2005-0818 Public exploit 4.3 MediumMarch 20, 2005
• punbb admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin... CVE-2005-0571 5.0 MediumFebruary 27, 2005
• punbb profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout)... CVE-2005-0570 5.0 MediumFebruary 27, 2005
• punbb Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary... CVE-2005-0569 Public exploit 7.5 HighFebruary 27, 2005