CVE Vulnerabilities

CVE-2005-4665

Published: Dec 31, 2005 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags.

Affected Software

NameVendorStart VersionEnd Version
PunbbPunbb1.0 (including)1.0 (including)
PunbbPunbb1.0.1 (including)1.0.1 (including)
PunbbPunbb1.0_alpha (including)1.0_alpha (including)
PunbbPunbb1.0_beta1 (including)1.0_beta1 (including)
PunbbPunbb1.0_beta2 (including)1.0_beta2 (including)
PunbbPunbb1.0_beta3 (including)1.0_beta3 (including)
PunbbPunbb1.0_rc1 (including)1.0_rc1 (including)
PunbbPunbb1.0_rc2 (including)1.0_rc2 (including)
PunbbPunbb1.1 (including)1.1 (including)
PunbbPunbb1.1.1 (including)1.1.1 (including)
PunbbPunbb1.1.2 (including)1.1.2 (including)
PunbbPunbb1.1.3 (including)1.1.3 (including)
PunbbPunbb1.1.4 (including)1.1.4 (including)
PunbbPunbb1.1.5 (including)1.1.5 (including)
PunbbPunbb1.2.1 (including)1.2.1 (including)
PunbbPunbb1.2.2 (including)1.2.2 (including)
PunbbPunbb1.2.3 (including)1.2.3 (including)
PunbbPunbb1.2.4 (including)1.2.4 (including)
PunbbPunbb1.2.5 (including)1.2.5 (including)
PunbbPunbb1.2.6 (including)1.2.6 (including)

References