CVE-2008-3968

Cross-site scripting (XSS) vulnerability in userlist.php in PunBB before 1.2.20 allows remote attackers to inject arbitrary web script or HTML via the p parameter.

Link	Resource
http://www.openwall.com/lists/oss-security/2008/09/09/10
http://punbb.informer.com/forums/topic/19682/punbb-1220-and-13rc-hotfix-released/
http://www.openwall.com/lists/oss-security/2008/09/09/2
http://www.securityfocus.com/bid/31082
http://punbb.informer.com/download/changelogs/1.2.19_to_1.2.20.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/45046

Configuration 1

cpe:2.3:a:punbb:punbb:1.0:beta3:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0:beta2:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0:rc2:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0:alpha:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0:rc1:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0:beta1a:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0:beta1:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*

---

Published : 2008-09-11 01:13

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-3968

Mitre link : CVE-2008-3968

No products.

CWE-79