Download PunBB 1.2.11

Many websites have a forum where users can engage in various discussions with each other. To do this in a clear form, a handy piece of software is needed so that you can assign different rights with which the forum can be managed. PunBB is one of these forum packages and is developed for a web server with a PHP-MySQL/PostgreSQL/SQLite environment. The developers started PunBB because they were dissatisfied with the performance of other forum packages. According to the developers, it is much faster than the competition, but has therefore had to give up on a number of points. An example can be done this page being watched. Version 1.2.11 is now available with the following announcement:

Version 1.2.11:

Here’s a short message announcing 1.2.11. This release has been made primarily to address an issue with the registration script that allowed a malicios user to perform a denial-of-service attack. PunBB 1.2.11 adds code to the registration script that prevents these flood registrations (an hour has to pass between registrations from the same IP). On top of this, an XSS vulnerability has been addressed.

Thanks to the people who alerted me via email about the circulation of an “exploit” for the DoS attack.

Version 1.2.10:

In the effort to release updated version as soon as possible after new issues are discovered, I hereby present PunBB 1.2.10. This release has been made to fix a couple of semi-serious security issues as well as a few minor bugs and annoyances. Fingers crossed, 1.2.10 should be the last release in the 1.2 tree. No, that does not mean I have a date or even an educated guess as to when 1.3 will be released. There are just too many variables involved for me to do that.

Thanks go out to Jonatan Wulcan, Stefan Esser, Smartys and Michael “PMD” Dorman.

Enjoy!