Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/55853
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0486
http://www.securityfocus.com/bid/37930
http://www.packetstormsecurity.com/1001-exploits/punbb13-xss.txt