medium4.3
CVE-2009-4894
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in PunBB before 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the …
Impact
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in PunBB before 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) password or (2) e-mail.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Punbb | Punbb | through 1.3.3 Versions 1.0, 1.0.1, 1.1, 1.1.1, 1.1.2 |