Total vulnerabilities in the database
admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter.
CVSS v2:
No CWE or OWASP classifications available.