NetSight
medium5.0

CVE-2006-0866

PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters.

Impact

PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters.

Affected products

VendorProductAffected versions
PunbbPunbb
Versions 1.0, 1.0.1, 1.0_alpha, 1.0_beta1, 1.0_beta1a, 1.0_beta2

References