Required CVE Record Information
Description
Cross-site scripting (XSS) vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the password field.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 5 Total
- openwall.com: [oss-security] 20081209 CVE request: Four issues in PunBB mailing-listx_transferred
- http://punbb.informer.com/forums/topic/20475/punbb-132/ x_transferred
- http://punbb.informer.com/ x_transferred
- secunia.com: 33059 third-party-advisoryx_transferred
- http://punbb.informer.com/wiki/punbb13/bugs#possible_xss_in_login x_transferred