• From: Vietnam
  • Registered: 2006-09-25
  • Posts: 1

Topic: Is PunBB poisoned NULL byte vulnerability?

I found an report here: http://www.security.nnov.ru/Odocument207.html . It is said that critical

I am not a programmer or web developer so I cannot know whether PunBB...

Please tell me what should I do with my website (using PunBB 1.2.12)

EDIT: Code Removed

2 Reply by Paul

  • Paul
  • Senior Member
  • Offline
  • From: Wales, UK.
  • Registered: 2003-08-13
  • Posts: 3,089

Re: Is PunBB poisoned NULL byte vulnerability?

Do nothing. The report appears to be incorrect and is being disputed. If this were a real vulnerability you can be sure it would have been fixed straight away.

  • Registered: 2004-11-17
  • Posts: 17

Re: Is PunBB poisoned NULL byte vulnerability?

http://punbb.org/forums/viewtopic.php?id=13244

  • Smartys
  • Former PunBB Developer
  • Offline
  • Registered: 2004-04-30
  • Posts: 7,844

Re: Is PunBB poisoned NULL byte vulnerability?

http://punbb.org/forums/viewtopic.php?id=13255
The followup. Long story short: new version tongue

  • Frank H
  • Former PunBB Developer
  • Offline
  • Registered: 2003-03-16
  • Posts: 1,423

Re: Is PunBB poisoned NULL byte vulnerability?

The Attachment mod was also affected by this, so update the administrative plugin.