• sirena
  • sirena
  • Senior Member
  • Offline
  • Registered: 2006-04-06
  • Posts: 473

Topic: Do XennoBB problems = PunBB problems?

I notice that XennoBB - http://www.xennobb.com - a forum package based on PunBB code has been having problems recently keeping it's home site up, perhaps due to vulnerabilities - http://secunia.com/product/11262/ - reported in its code base.

I just wondered if Rickard was keeping an eye on this product to see if the vulns identified in Xennobb had any implications for the PunBB code base?

  • From: 127.0.0.1
  • Registered: 2001-11-02
  • Posts: 9,167

Re: Do XennoBB problems = PunBB problems?

I am keeping my eye on it. Neither of the two vulnerabilities discovered by Chris Boulton affect PunBB.

"Programming is like sex: one mistake and you have to support it for the rest of your life."

Rickard's Website

  • Smartys
  • Former PunBB Developer
  • Offline
  • Registered: 2004-04-30
  • Posts: 7,844

Re: Do XennoBB problems = PunBB problems?

The important thing to realize is that XenoBB is mostly just PunBB with a lot of mods added. The "lot of mods added" part is where you'll see a lot of the security issues I believe tongue