medium4.3
CVE-2008-3336
Multiple cross-site scripting (XSS) vulnerabilities in PunBB before 1.2.19 allow remote attackers to inject arbitrary web script or HTML via unspecified vector…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in PunBB before 1.2.19 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) include/parser.php and (2) moderate.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Punbb | Punbb | All versions through 1.2.18 Versions 1.0, 1.0.1, 1.1, 1.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://punbb.informer.com/
- http://punbb.informer.com/download/changelogs/1.2.17_to_1.2.19.txt
- http://punbb.informer.com/forums/topic/19539/punbb-1219/
- http://secunia.com/advisories/31219
- http://www.securityfocus.com/bid/30396
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44009
- http://punbb.informer.com/
- http://punbb.informer.com/download/changelogs/1.2.17_to_1.2.19.txt
- http://punbb.informer.com/forums/topic/19539/punbb-1219/
- http://secunia.com/advisories/31219
- http://www.securityfocus.com/bid/30396
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44009