What’s Vulnerable › Vulnerabilities

CVE-2008-3335

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-07-27 · updated 2026-06-16
• Weakness: CWE-94

Description

Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors.

Affected products

• Punbb: through 1.2.18; 1.0, 1.0-alpha, 1.0-beta1, 1.0-beta1a, 1.0-beta2, 1.0-beta3 (+27)

References

• http://punbb.informer.com/
• http://punbb.informer.com/download/changelogs/1.2.17_to_1.2.19.txt
• http://punbb.informer.com/forums/topic/19539/punbb-1219/
• http://secunia.com/advisories/31219
• http://www.securityfocus.com/bid/30395
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44010
• http://punbb.informer.com/
• http://punbb.informer.com/download/changelogs/1.2.17_to_1.2.19.txt
• http://punbb.informer.com/forums/topic/19539/punbb-1219/
• http://secunia.com/advisories/31219
• http://www.securityfocus.com/bid/30395
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44010

Get alerted when CVE-2008-3335 or the next vulnerability affects your stack