CVE-2006-1089

Published: Mar 9, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in header.php in PunBB 1.2.10 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly handled when the PHP_SELF variable is used to handle a pun_page tag.

Affected (26)

Products: Punbb: Punbb

Punbb

1 product

Punbb

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Punbb Punbb	Version 1.0.1
Punbb Punbb	Version 1.0
Punbb Punbb	Version 1.0_alpha
Punbb Punbb	Version 1.0_beta1
Punbb Punbb	Version 1.0_beta1a
Punbb Punbb	Version 1.0_beta2
Punbb Punbb	Version 1.0_beta3
Punbb Punbb	Version 1.0_rc1
Punbb Punbb	Version 1.0_rc2
Punbb Punbb	Version 1.1.1
Punbb Punbb	Version 1.1.2
Punbb Punbb	Version 1.1.3
Punbb Punbb	Version 1.1.4
Punbb Punbb	Version 1.1.5
Punbb Punbb	Version 1.1
Punbb Punbb	Version 1.2.10
Punbb Punbb	Version 1.2.1
Punbb Punbb	Version 1.2.2
Punbb Punbb	Version 1.2.3
Punbb Punbb	Version 1.2.4
Punbb Punbb	Version 1.2.5
Punbb Punbb	Version 1.2.6
Punbb Punbb	Version 1.2.7
Punbb Punbb	Version 1.2.8
Punbb Punbb	Version 1.2.9
Punbb Punbb	Version 1.2