Read the docs
TI-2011-02981 Aliases CVE-2011-3371GHSA-r4p3-cf4c-f49f

Multiple cross-site scripting (XSS) vulnerabilities in include/functions.php in PunBB…

Priority LOW 25CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Multiple cross-site scripting (XSS) vulnerabilities in include/functions.php in PunBB before 1.3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) form_sent, (3) csrf_token, (4) req_confirm, or (5) delete parameter to delete.php, the (6) id, (7) form_sent, (8) csrf_token, (9) req_message, or (10) submit parameter to edit.php, the (11) action, (12) form_sent, (13) csrf_token, (14) req_email, or (15) request_pass parameter to login.php, the (16) email, (17) form_sent, (18) redirect_url, (19) csrf_token, (20) req_subject, (21) req_message, or (22) submit parameter to misc.php, the (23) action, (24) id, (25) form_sent, (26) csrf_token, (27) req_old_password, (28) req_new_password1, (29) req_new_password2, or (30) update parameter to profile.php, or the (31) action, (32) form_sent, (33) csrf_token, (34) req_username, (35) req_password1, (36) req_password2, (37) req_email1, (38) timezone, or (39) register parameter to register.php.

Why it matters now

EPSS 0.0233 83rd percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 49

CPEVersionsRoleVendor
cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*up to 1.3.5VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*1.0VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.0:alpha:*:*:*:*:*:*1.0 alphaVulnerablePunbb
cpe:2.3:a:punbb:punbb:1.0:beta1:*:*:*:*:*:*1.0 beta1VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.0:beta1a:*:*:*:*:*:*1.0 beta1aVulnerablePunbb
cpe:2.3:a:punbb:punbb:1.0:beta2:*:*:*:*:*:*1.0 beta2VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.0:beta3:*:*:*:*:*:*1.0 beta3VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.0:rc1:*:*:*:*:*:*1.0 rc1VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.0:rc2:*:*:*:*:*:*1.0 rc2VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*1.0.1VulnerablePunbb
  • cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:* Versions up to 1.3.5 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.0:alpha:*:*:*:*:*:* Versions 1.0 alpha Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.0:beta1:*:*:*:*:*:* Versions 1.0 beta1 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.0:beta1a:*:*:*:*:*:* Versions 1.0 beta1a Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.0:beta2:*:*:*:*:*:* Versions 1.0 beta2 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.0:beta3:*:*:*:*:*:* Versions 1.0 beta3 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.0:rc1:*:*:*:*:*:* Versions 1.0 rc1 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.0:rc2:*:*:*:*:*:* Versions 1.0 rc2 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Punbb
Show 39 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*1.1VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*1.1.1VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*1.1.2VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*1.1.3VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*1.1.4VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*1.1.5VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*1.2VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*1.2.1VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*1.2.2VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*1.2.3VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*1.2.4VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*1.2.5VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*1.2.6VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*1.2.7VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*1.2.8VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*1.2.9VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*1.2.10VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*1.2.11VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*1.2.12VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*1.2.13VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*1.2.14VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*1.2.15VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:*1.2.16VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.17:*:*:*:*:*:*:*1.2.17VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.18:*:*:*:*:*:*:*1.2.18VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.19:*:*:*:*:*:*:*1.2.19VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.20:*:*:*:*:*:*:*1.2.20VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.21:*:*:*:*:*:*:*1.2.21VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.22:*:*:*:*:*:*:*1.2.22VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.2.23:*:*:*:*:*:*:*1.2.23VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.3:*:*:*:*:*:*:*1.3VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.3:beta:*:*:*:*:*:*1.3 betaVulnerablePunbb
cpe:2.3:a:punbb:punbb:1.3:rc1:*:*:*:*:*:*1.3 rc1VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.3:rc2:*:*:*:*:*:*1.3 rc2VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.3:rc7:*:*:*:*:*:*1.3 rc7VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.3.1:*:*:*:*:*:*:*1.3.1VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.3.2:*:*:*:*:*:*:*1.3.2VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.3.3:*:*:*:*:*:*:*1.3.3VulnerablePunbb
cpe:2.3:a:punbb:punbb:1.3.4:*:*:*:*:*:*:*1.3.4VulnerablePunbb
  • cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:* Versions 1.1.5 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:* Versions 1.2.6 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:* Versions 1.2.7 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:* Versions 1.2.8 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:* Versions 1.2.9 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:* Versions 1.2.10 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:* Versions 1.2.11 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:* Versions 1.2.12 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:* Versions 1.2.13 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:* Versions 1.2.14 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:* Versions 1.2.15 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:* Versions 1.2.16 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.17:*:*:*:*:*:*:* Versions 1.2.17 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.18:*:*:*:*:*:*:* Versions 1.2.18 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.19:*:*:*:*:*:*:* Versions 1.2.19 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.20:*:*:*:*:*:*:* Versions 1.2.20 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.21:*:*:*:*:*:*:* Versions 1.2.21 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.22:*:*:*:*:*:*:* Versions 1.2.22 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.2.23:*:*:*:*:*:*:* Versions 1.2.23 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.3:beta:*:*:*:*:*:* Versions 1.3 beta Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.3:rc1:*:*:*:*:*:* Versions 1.3 rc1 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.3:rc2:*:*:*:*:*:* Versions 1.3 rc2 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.3:rc7:*:*:*:*:*:* Versions 1.3 rc7 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Punbb
  • cpe:2.3:a:punbb:punbb:1.3.4:*:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Punbb

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-3371
  2. 2026-10-03 Alias added: GHSA-r4p3-cf4c-f49f

References

Exploit 3

Patch 6

  • TI-2008-03196 Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject… CVSS 2.0HIGH 10.0
  • TI-2006-05520 Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows… CVSS 2.0HIGH 7.5
  • TI-2006-01057 register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of… CVSS 2.0HIGH 7.8
  • TI-2005-03341 SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote… CVSS 2.0HIGH 7.5
  • TI-2005-03153 PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows… CVSS 2.0HIGH 7.5
  • TI-2005-00520 Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute… CVSS 2.0HIGH 7.5
See all 40 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences