CVE-2006-0866: Punbb

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters.

Affected products

• Punbb Punbb: version 1.0 only; version 1.0.1 only; version 1.0_alpha only; version 1.0_beta1 only; version 1.0_beta1a only; version 1.0_beta2 only; …

Published 2006-02-23. Last modified 2026-06-16.