BID:11847

PunBB Profile.PHP Cross-Site Scripting Vulnerability

Info

PunBB Profile.PHP Cross-Site Scripting Vulnerability

Bugtraq ID:	11847
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 24 2004 12:00AM
Updated:	Apr 24 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to Mediator
Vulnerable:	PunBB PunBB 1.1.3 PunBB PunBB 1.1.2 PunBB PunBB 1.1.1 PunBB PunBB 1.1 PunBB PunBB 1.0.1 PunBB PunBB 1.0 RC2 PunBB PunBB 1.0 RC1 PunBB PunBB 1.0 _beta3 PunBB PunBB 1.0 _beta2 PunBB PunBB 1.0

Not Vulnerable:	PunBB PunBB 1.1.4

Discussion

PunBB Profile.PHP Cross-Site Scripting Vulnerability

It is reported that PunBB is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

Exploit / POC

PunBB Profile.PHP Cross-Site Scripting Vulnerability

No exploit is required.

Solution / Fix

PunBB Profile.PHP Cross-Site Scripting Vulnerability

Solution:
The vendor has supplied an updated version addressing this issue, PunBB 1.1.4:

PunBB PunBB 1.0 RC1