Browse CVEs

MEDIUM 6.5 CVE-2008-5434 Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the (1)… Punbb Mitigation only Fix from $1,6002008-12-11 HIGH 7.2 CVE-2006-5737 PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time), which mig… Punbb Mitigation only Fix from $1,9502006-11-06 MEDIUM 6.8 CVE-2006-2724 Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script to other a… Punbb Mitigation only Fix from $1,6002006-06-01 MEDIUM 5.0 CVE-2006-0865 PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering many user accounts quickly. Punbb No fix yet Fix from $1,6002006-02-23 MEDIUM 5.0 CVE-2006-0866 PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 charac… Punbb Mitigation only Fix from $1,6002006-02-23 MEDIUM 5.0 CVE-2005-4688 PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an addres… Punbb Mitigation only Fix from $1,6002005-12-31 HIGH 7.5 CVE-2005-3328 PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the pun_root… Punbb Mitigation only Fix from $1,9502005-10-27