Punbb
by Punbb
Source repositories
CVEs (45)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2005-3079 | 0.00 | — | 0.01 | Sep 27, 2005 | PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection. | |||
| CVE-2005-2193 | 0.00 | — | 0.01 | Jul 11, 2005 | SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the… | |||
| CVE-2005-0570 | 0.00 | — | 0.02 | May 2, 2005 | profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's password to NULL. | |||
| CVE-2005-0571 | 0.00 | — | 0.01 | May 2, 2005 | admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter. | |||
| CVE-2005-1072 | 0.00 | — | 0.01 | Apr 8, 2005 | Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML. |
- CVE-2005-3079Sep 27, 2005risk 0.00cvss —epss 0.01
PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.
- CVE-2005-2193Jul 11, 2005risk 0.00cvss —epss 0.01
SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the…
- CVE-2005-0570May 2, 2005risk 0.00cvss —epss 0.02
profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's password to NULL.
- CVE-2005-0571May 2, 2005risk 0.00cvss —epss 0.01
admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter.
- CVE-2005-1072Apr 8, 2005risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML.
Page 3 of 3