Description
Cross-site scripting (XSS) vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web script or HTML via the req_message parameter, because the value of the redirect_url parameter is not sanitized.
References
- 19986 third-party-advisory
- http://www.punbb.org/download/hdiff/hdiff-1.2.11_to_1.2.12.html
- 25256 vdb-entry
- ADV-2006-1670 vdb-entry
- 20060503 PunBB1.2.11 Cross-Site Scripting mailing-list
- http://www.punbb.org/changelogs/1.2.11_to_1.2.12.txt
- 849 third-party-advisory
- punbb-misc-xss(26245) vdb-entry
- 17827 vdb-entry