|
Description
|
|
Two vulnerabilities were identified in PunBB, which could be exploited by attackers to execute arbitrary scripting code or cause a denial of service.
The first flaw is due to an input validation error in the "header.php" script that does not properly validate the "PHP_SELF" variable, which could be exploited by attackers to cause malicious scripting code to be executed by the user's browser in the security context of an affected Web site.
The second flaw is due to a design error in the "register.php" script that does not prevent registration flooding, which could be exploited by remote attackers to cause a denial of service.
|
