2006-02-23 23:00:00
mitre
PUBLISHED
PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an accounts password, which may be as short as 4 characters.