BID:11845

PunBB Install.PHP Cross-Site Scripting Vulnerability

Info

PunBB Install.PHP Cross-Site Scripting Vulnerability

Bugtraq ID:	11845
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 13 2004 12:00AM
Updated:	Feb 13 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to Isothop.
Vulnerable:	PunBB PunBB 1.1.1 PunBB PunBB 1.1 PunBB PunBB 1.0.1 PunBB PunBB 1.0 RC2 PunBB PunBB 1.0 RC1 PunBB PunBB 1.0 _beta3 PunBB PunBB 1.0 _beta2 PunBB PunBB 1.0

Not Vulnerable:	PunBB PunBB 1.1.2

Discussion

PunBB Install.PHP Cross-Site Scripting Vulnerability

It is reported that PunBB is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input before outputting it in Web pages.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the Web browser of the victim user. This would occur in the security context of the affected Web site and may allow for theft of cookie-based authentication credentials or other attacks.

Exploit / POC

PunBB Install.PHP Cross-Site Scripting Vulnerability

There is no exploit required.

Solution / Fix

PunBB Install.PHP Cross-Site Scripting Vulnerability

Solution:
The vendor has addressed this issue in PunBB version 1.1.2 and later.

PunBB PunBB 1.0 RC1