'

漏洞组件 — PunBB

漏洞详情：
PunBB是个快速、轻量的PHP架构网络论坛，以GNU的标准释放。它的首要原则为快速、轻巧、与其它论坛相比更少量的图像。PunBB比起其它论坛功能较少，但也因此更快速、更小巧，并正确的支持XHTML与CSS架构页面。 此外，PunBB可在任何支持PHP语言的作业系统上运作，PunBB可以在MySQL、PostgreSQL、SQLite等数据库下储存信息。

相关漏洞

SSV ID 漏洞名称
SSV-20938 PunBB PHP Forum 1.3.5 Cross Site Scripting
SSV-19984 PunBB <= 1.3.4 and Pun_PM <= v1.2.6 Remote Blind SQL Injection Exploit
SSV-14459 PunBB Extension Attachment <= 1.0.2 SQL Injection
SSV-12538 PunBB pun_attachment上传附件扩展sql注射漏洞
SSV-11956 PunBB Reputation.php Mod <= 2.0.4 Local File Inclusion Exploit
SSV-11902 PunBB Automatic Image Upload <= 1.3.5 Remote SQL Injection Exploit
SSV-11903 PunBB Automatic Image Upload <= 1.3.5 Delete Arbitrary File Exploit
SSV-14744 PunBB Reputation.php Mod <= 2.0.4 Blind SQL Injection Exploit
SSV-11740 PunBB Affiliates Mod <= 1.1 Remote Blind SQL Injection Exploit
SSV-11741 PunBB Extension Vote For Us <= 1.0.1 Blind SQL Injection Exploit
SSV-17514 PunBB Mod PunPortal 0.1 Local File Inclusion Exploit
SSV-17513 PunBB (Private Messaging System 1.2.x) Multiple LFI Exploit
SSV-3726 PunBB多个远程跨站脚本漏洞
SSV-2939 PunBB口令重置弱随机数绕过安全限制漏洞
SSV-8145 PunBB <= 1.2.16 Blind Password Recovery Exploit
SSV-2648 Automatic Image Upload with Thumbnails for PunBB 'uploadimg.php'任意文件上传漏洞
SSV-6638 PunBB 1.2.14 Remote Code Execution Exploit
SSV-16979 PunBB <= 1.2.14 Remote Code Execution Exploit
SSV-773 NucleusCMS/Blog:CMS/PunBB未明远程文件包含漏洞
SSV-15865 PunBB <= 2.0.10 (Register Multiple Users) Denial of Service Exploit
SSV-15537 PunBB 1.2.4 (change_email) SQL Injection Exploit
SSV-15523 PunBB version <= 1.2.2 Authentication Bypass Exploit
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English