Description
Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags.
References
- http://www.punbb.org/changelogs/1.2.6_to_1.2.7.txt
- ADV-2005-1708 vdb-entry
- 20060116 PunBB BBCode URL Tag Script Injection Vulnerability mailing-list
- 14808 vdb-entry
- 19382 vdb-entry
- 20060117 Re: PunBB BBCode URL Tag Script Injection Vulnerability mailing-list
- 16775 third-party-advisory
- http://punbb.org/changelogs/1.2.6_to_1.2.7.txt
- punbb-bbcode-url-xss(22234) vdb-entry