Description
Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script to other administrators via the "Admin note" feature, a different vulnerability than CVE-2006-2227.
References
- http://www.neosecurityteam.net/advisories/Advisory-22.txt
- 1016157 vdb-entry
- 20060521 PunBB 1.2.11 Cross site scripting mailing-list
- punbb-adminnote-xss(26616) vdb-entry