Unrated severityNVD Advisory· Published Dec 31, 2005· Updated Jun 16, 2026
CVE-2005-4665
CVE-2005-4665
Description
Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags.
Affected products
21cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*
- (no CPE)range: <=1.2.6
Patches
Vulnerability mechanics
References
9- www.securityfocus.com/bid/14808nvdPatch
- punbb.org/changelogs/1.2.6_to_1.2.7.txtnvd
- secunia.com/advisories/16775nvd
- www.osvdb.org/19382nvd
- www.punbb.org/changelogs/1.2.6_to_1.2.7.txtnvd
- www.securityfocus.com/archive/1/422088/100/0/threadednvd
- www.securityfocus.com/archive/1/422267/100/0/threadednvd
- www.vupen.com/english/advisories/2005/1708nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/22234nvd
News mentions
0No linked articles in our index yet.