|
Description
|
|
Multiple vulnerabilities have been identified in PunBB, which could be exploited by attackers to execute arbitrary scripting code. These issues are due to input validation errors in the "misc.php" and "admin_categories.php" scripts when processing the "redirect_url" (HTTP_REFERER) and "cat_name" parameters, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
Note : The "cat_name" issue could potentially be exploited by attackers to execute arbitrary PHP code by uploading a malicious image and tricking an administrator into adding and deleting a specially crafted category.
|
