cbcvebase.

Punbb Private Messaging System vulnerabilities

1 known vulnerability affecting punbb/private_messaging_system.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2008-6308P3MEDIUMCVSS 5.1PoC≤ 1.2.3v1.2.0+2 more2009-02-27
CVE-2008-6308 [MEDIUM] CWE-22 CVE-2008-6308: Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. (dot dot) in the pun_user[language] parameter to (1) functions_navlinks.php, (2) header_new_messages.php, (3) profile_send.php, and (4) viewtopic_PM-link.php in include/pms/.
nvd
Punbb Private Messaging System vulnerabilities | cvebase