PunBB BBCode URL Tag HTML Injection Vulnerability

Bugtraq ID:	14808
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 12 2005 12:00AM
Updated:	Sep 12 2005 12:00AM
Credit:	Smartys is credited with the discovery of this vulnerability.
Vulnerable:	PunBB PunBB 1.2.6 PunBB PunBB 1.2.5 PunBB PunBB 1.2.4 PunBB PunBB 1.2.3 PunBB PunBB 1.2.2 PunBB PunBB 1.2.1 PunBB PunBB 1.1.5 PunBB PunBB 1.1.4 PunBB PunBB 1.1.3 PunBB PunBB 1.1.2 PunBB PunBB 1.1.1 PunBB PunBB 1.1 PunBB PunBB 1.0.1 PunBB PunBB 1.0 RC2 PunBB PunBB 1.0 RC1 PunBB PunBB 1.0 _beta3 PunBB PunBB 1.0 _beta2 PunBB PunBB 1.0 _beta1 PunBB PunBB 1.0 _alpha PunBB PunBB 1.0
Not Vulnerable:	PunBB PunBB 1.2.7

PunBB BBCode URL Tag HTML Injection Vulnerability

PunBB is prone to an HTML injection vulnerability. This is due to a lack of proper sanitization of user-supplied input.

Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

PunBB BBCode URL Tag HTML Injection Vulnerability

No exploit is required.

PunBB BBCode URL Tag HTML Injection Vulnerability

Solution:
The vendor has released version 1.2.7 to address this issue.


PunBB PunBB 1.2.6

• PunBB punbb-1.2.7.tar.gz
  http://www.punbb.org/download/punbb-1.2.7.tar.gz

PunBB BBCode URL Tag HTML Injection Vulnerability

References:

• PunBB Changelog (PunBB)
  
• PunBB Homepage (PunBB)