Vulnerabilities > CVE-2005-4688 - Denial-Of-Service vulnerability in Punbb 1.2.9
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |