CVE-2008-1485

Published: Mar 24, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the get_host parameter to moderate.php.

Affected (31)

Products: Punbb: Punbb

Punbb

1 product

Punbb

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Punbb Punbb	Version 1.0.1
Punbb Punbb	Version 1.0
Punbb Punbb	Version 1.0_alpha
Punbb Punbb	Version 1.0_beta1
Punbb Punbb	Version 1.0_beta2
Punbb Punbb	Version 1.0_beta3
Punbb Punbb	Version 1.0_rc1
Punbb Punbb	Version 1.0_rc2
Punbb Punbb	Version 1.1.1
Punbb Punbb	Version 1.1.2
Punbb Punbb	Version 1.1.3
Punbb Punbb	Version 1.1.4
Punbb Punbb	Version 1.1.5
Punbb Punbb	Version 1.1
Punbb Punbb	Version 1.2.10
Punbb Punbb	Version 1.2.11
Punbb Punbb	Version 1.2.12
Punbb Punbb	Version 1.2.13
Punbb Punbb	Version 1.2.14
Punbb Punbb	Version 1.2.15
Punbb Punbb	Version 1.2.16
Punbb Punbb	Version 1.2.1
Punbb Punbb	Version 1.2.2
Punbb Punbb	Version 1.2.3
Punbb Punbb	Version 1.2.4
Punbb Punbb	Version 1.2.5
Punbb Punbb	Version 1.2.6
Punbb Punbb	Version 1.2.7
Punbb Punbb	Version 1.2.8
Punbb Punbb	Version 1.2.9
Punbb Punbb	Version 1.2