CVE-2006-4759: Punbb

Low severity, CVSS 3.6. EPSS: 2.3% chance of exploitation in the next 30 days.

PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote authenticated administrative users to upload arbitrary files and execute code, as demonstrated by a query to admin_options.php with an avatars_dir parameter ending in %00. NOTE: this issue was originally disputed by the vendor, but the dispute was withdrawn on 20060926.

Affected products

• Punbb Punbb: version 1.2.12 only

Published 2006-09-13. Last modified 2026-06-16.