The remote web server contains a PHP application that is prone to cross-site scripting attacks. Description : According to its banner, the remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate URL and quote tags. With a specially-crafted URL, an attacker may be able to inject arbitrary HTML and script code into a user's browser, resulting in a loss of integrity.

Upgrade to PunBB version 1.1.5 or later.

• http://www.punbb.org/changelogs/1.1.4_to_1.1.5.txt

---

Updated on 2015-03-25