CVE-2005-0818

PunBB 1.2.3 - Cross-Site Scripting via Email or Jabber Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-0818. PoCs published by benji lemien.

AI-analyzed exploit summary The provided text describes an HTML injection vulnerability in PunBB 1.2.3, where an attacker can inject arbitrary HTML or JavaScript code via user-controlled input. The example demonstrates a basic XSS payload.

Description

Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) email or (2) Jabber parameters.

Exploits (1)

exploitdb WRITEUP VERIFIED
by benji lemien · textwebappsphp
https://www.exploit-db.com/exploits/25230

The provided text describes an HTML injection vulnerability in PunBB 1.2.3, where an attacker can inject arbitrary HTML or JavaScript code via user-controlled input. The example demonstrates a basic XSS payload.

Classification
Writeup 80%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: PunBB 1.2.3
No auth needed
Prerequisites: User interaction required to trigger the payload
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1013446
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/19725

Scores

EPSS 0.0268
EPSS Percentile 83.9%

Details

Status published
Products (1)
punbb/punbb 1.2.3
Published May 02, 2005
Tracked Since Feb 18, 2026