Vulnerability in Punbb

CVE-2005-4686

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregister_globals function, which allows attackers to obtain unspecified sensitive information.

EPSS: 0.012 (64.7th percentile) — read the EPSS interpretation.

Affected products

  • Punbb — versions 1.2.1, 1.2.2, 1.2.3
  • N/a — versions n/a

References