CVE-2008-3968
11.09.2008, 01:13
Cross-site scripting (XSS) vulnerability in userlist.php in PunBB before 1.2.20 allows remote attackers to inject arbitrary web script or HTML via the p parameter.
| Vendor | Product | Version |
|---|---|---|
| punbb | punbb | 𝑥 ≤ 1.2.19 |
| punbb | punbb | 1.0 |
| punbb | punbb | 1.0:alpha |
| punbb | punbb | 1.0:beta1 |
| punbb | punbb | 1.0:beta1a |
| punbb | punbb | 1.0:beta2 |
| punbb | punbb | 1.0:beta3 |
| punbb | punbb | 1.0:rc1 |
| punbb | punbb | 1.0:rc2 |
| punbb | punbb | 1.1 |
| punbb | punbb | 1.1.1 |
| punbb | punbb | 1.1.2 |
| punbb | punbb | 1.1.3 |
| punbb | punbb | 1.1.4 |
| punbb | punbb | 1.1.5 |
| punbb | punbb | 1.2.1 |
| punbb | punbb | 1.2.11 |
| punbb | punbb | 1.2.13 |
| punbb | punbb | 1.2.15 |
| punbb | punbb | 1.2.16 |
𝑥
= Vulnerable software versions
References