CVE-2008-1485

Cross-site scripting (XSS) vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the get_host parameter to moderate.php.

Link	Resource
http://punbb.org/download/changelogs/1.2.16_to_1.2.17.txt
http://secunia.com/advisories/29043	Vendor Advisory
http://osvdb.org/45561

Configuration 1

cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:* cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*

---

Published : 2008-03-24 11:44

Updated : 2009-09-01 05:14

---

NVD link : CVE-2008-1485

Mitre link : CVE-2008-1485

No products.

CWE-79