Approved changes feed: RSS · Atom

cpe:2.3:a:punbb:punbb:1.0_beta1a:*:*:*:*:*:*:*

part: a version: 1.0_beta1a update: *

VendorPunbb (86956e28-fbc8-51c0-8819-c28c5ba10aa7)
ProductPunbb (38c9ed34-fd67-5504-833f-2709e48fea7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/punbb/punbb purl2cpe 2026-06-01 10:17:27.534825

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5738 vulnerable 2026-06-08 04:49:21.177798 Details available
Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.
Published: 2006-11-06T18:00:00.000Z
Updated: 2025-04-03T15:23:43.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5736 vulnerable 2026-06-08 04:49:21.165044 Details available
SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized.
Published: 2006-11-06T18:00:00.000Z
Updated: 2024-08-07T20:04:54.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1089 vulnerable 2026-06-08 04:48:56.205409 Details available
Cross-site scripting (XSS) vulnerability in header.php in PunBB 1.2.10 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly handled when the PHP_SELF variable is used to handle a pun_page tag.
Published: 2006-03-09T11:00:00.000Z
Updated: 2024-08-07T16:56:15.721Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0866 vulnerable 2026-06-08 04:48:55.558264 Details available
PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters.
Published: 2006-02-23T23:00:00.000Z
Updated: 2024-08-07T16:48:56.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0865 vulnerable 2026-06-08 04:48:55.547067 Details available
PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering many user accounts quickly.
Published: 2006-02-23T23:00:00.000Z
Updated: 2024-08-07T16:48:56.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3079 vulnerable 2026-06-08 04:48:39.527194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3078 vulnerable 2026-06-08 04:48:39.517633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.