Description
profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's password to NULL.
References
- 12652 vdb-entry
- 14394 third-party-advisory
- 20050224 Multiple vulns in punBB mailing-list
- punbb-profile-dos(19483) vdb-entry