CVE-2005-3078

Published: Sep 27, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in PunBB before 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the "forgotten e-mail" feature.

Affected (23)

Products: Punbb: Punbb

Punbb

1 product

Punbb

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Punbb Punbb	Version 1.0.1
Punbb Punbb	Version 1.0
Punbb Punbb	Version 1.0_alpha
Punbb Punbb	Version 1.0_beta1
Punbb Punbb	Version 1.0_beta1a
Punbb Punbb	Version 1.0_beta2
Punbb Punbb	Version 1.0_beta3
Punbb Punbb	Version 1.0_rc1
Punbb Punbb	Version 1.0_rc2
Punbb Punbb	Version 1.1.1
Punbb Punbb	Version 1.1.2
Punbb Punbb	Version 1.1.3
Punbb Punbb	Version 1.1.4
Punbb Punbb	Version 1.1.5
Punbb Punbb	Version 1.1
Punbb Punbb	Version 1.2.1
Punbb Punbb	Version 1.2.2
Punbb Punbb	Version 1.2.3
Punbb Punbb	Version 1.2.4
Punbb Punbb	Version 1.2.5
Punbb Punbb	Version 1.2.6
Punbb Punbb	Version 1.2.7
Punbb Punbb	Version 1.2

References (4)

http://secunia.com/advisories/16908

Source: cve@mitre.org

PatchVendor Advisory

http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt

Source: cve@mitre.org

http://secunia.com/advisories/16908

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.