Description
Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.
References (2)
Core 2
Core References
Patch x_refsource_confirm
http://forums.punbb.org/viewtopic.php?id=13496
Various Sources x_refsource_confirm
http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt
Scores
CVSS v3
7.2
EPSS
0.0085
EPSS Percentile
54.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-89
Status
published
Products (29)
punbb/punbb
1.0
punbb/punbb
1.0.1
punbb/punbb
1.0_alpha
punbb/punbb
1.0_beta1
punbb/punbb
1.0_beta1a
punbb/punbb
1.0_beta2
punbb/punbb
1.0_beta3
punbb/punbb
1.0_rc1
punbb/punbb
1.0_rc2
punbb/punbb
1.1
... and 19 more
Published
Nov 06, 2006
Tracked Since
Feb 18, 2026