CVE-2009-4894

EUVD-2009-4857
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in PunBB before 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) password or (2) e-mail.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
Affected Products (NVD)
VendorProductVersion
punbbpunbb
𝑥
≤ 1.3.3
punbbpunbb
1.0
punbbpunbb
1.0:alpha
punbbpunbb
1.0:beta1
punbbpunbb
1.0:beta1a
punbbpunbb
1.0:beta2
punbbpunbb
1.0:beta3
punbbpunbb
1.0:rc1
punbbpunbb
1.0:rc2
punbbpunbb
1.0.1
punbbpunbb
1.1
punbbpunbb
1.1.1
punbbpunbb
1.1.2
punbbpunbb
1.1.3
punbbpunbb
1.1.4
punbbpunbb
1.1.5
punbbpunbb
1.2
punbbpunbb
1.2.1
punbbpunbb
1.2.2
punbbpunbb
1.2.3
punbbpunbb
1.2.4
punbbpunbb
1.2.5
punbbpunbb
1.2.6
punbbpunbb
1.2.7
punbbpunbb
1.2.8
punbbpunbb
1.2.9
punbbpunbb
1.2.10
punbbpunbb
1.2.11
punbbpunbb
1.2.12
punbbpunbb
1.2.13
punbbpunbb
1.2.14
punbbpunbb
1.2.15
punbbpunbb
1.2.16
punbbpunbb
1.2.17
punbbpunbb
1.2.18
punbbpunbb
1.2.19
punbbpunbb
1.2.20
punbbpunbb
1.2.21
punbbpunbb
1.3
punbbpunbb
1.3.1
punbbpunbb
1.3.2
𝑥
= Vulnerable software versions