VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Oct 2, 2011· Updated Apr 29, 2026

CVE-2011-3371

CVE-2011-3371

Description

Multiple cross-site scripting (XSS) vulnerabilities in include/functions.php in PunBB before 1.3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) form_sent, (3) csrf_token, (4) req_confirm, or (5) delete parameter to delete.php, the (6) id, (7) form_sent, (8) csrf_token, (9) req_message, or (10) submit parameter to edit.php, the (11) action, (12) form_sent, (13) csrf_token, (14) req_email, or (15) request_pass parameter to login.php, the (16) email, (17) form_sent, (18) redirect_url, (19) csrf_token, (20) req_subject, (21) req_message, or (22) submit parameter to misc.php, the (23) action, (24) id, (25) form_sent, (26) csrf_token, (27) req_old_password, (28) req_new_password1, (29) req_new_password2, or (30) update parameter to profile.php, or the (31) action, (32) form_sent, (33) csrf_token, (34) req_username, (35) req_password1, (36) req_password2, (37) req_email1, (38) timezone, or (39) register parameter to register.php.

Affected products

49
  • Punbb/Punbb49 versions
    cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*+ 48 more
    • cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*range: <=1.3.5
    • cpe:2.3:a:punbb:punbb:1.3:beta:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.3:rc1:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.3:rc2:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.3:rc7:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.0:alpha:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.0:beta1a:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.17:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.18:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.19:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.20:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.21:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.22:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.2.23:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:punbb:punbb:1.3.4:*:*:*:*:*:*:*

Patches

1
dd50a50a2760

Fix XSS vulnerabilities described on http://seclists.org/fulldisclosure/2011/Sep/158

https://github.com/punbb/punbbashcsSep 18, 2011via nvd-ref
commit
1 file changed · +2 −2
  • include/functions.php+2 −2 modified
    @@ -2,7 +2,7 @@
 /**
  * Loads common functions used throughout the site.
  *
- * @copyright (C) 2008-2009 PunBB, partially based on code (C) 2008-2009 FluxBB.org
+ * @copyright (C) 2008-2011 PunBB, partially based on code (C) 2008-2009 FluxBB.org
  * @license http://www.gnu.org/licenses/gpl.html GPL version 2 or higher
  * @package PunBB
  */
@@ -2672,7 +2672,7 @@ function _csrf_confirm_form($key, $values)
 		<div class="ct-box info-box">
 			<p><?php echo $lang_common['CSRF token mismatch'] ?></p>
 		</div>
-		<form class="frm-form" method="post" accept-charset="utf-8" action="<?php echo $forum_page['form_action'] ?>">
+		<form class="frm-form" method="post" accept-charset="utf-8" action="<?php echo forum_htmlencode($forum_page['form_action']) ?>">
 			<div class="hidden">
 				<?php echo implode("\n\t\t\t\t", $forum_page['hidden_fields'])."\n" ?>
 			</div>

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

9

News mentions

0

No linked articles in our index yet.