CVE:CVE-2007-2235
CNNVD:CNNVD-200704-470
PunBB中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到misc.php的(1)Referer HTTP头或在admin_categories.php文件中删除类别时的类别名称，注入任意的web脚本或HTML。
solution:Upgrade punbb punbb to a higher version than 1.2.14,and avoid the version (,1.2.14]