profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the users password to NULL.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Punbb |
Punbb |
1.2.1 (including) |
1.2.1 (including) |
References