Vulnerability Details CVE-2007-3591
Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.3%
CVSS Severity
CVSS v2 Score 5.0
References
- http://osvdb.org/37819
- http://secunia.com/advisories/25926
- http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118
- http://www.securityfocus.com/bid/24763
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35261
- http://osvdb.org/37819
- http://secunia.com/advisories/25926
- http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118
- http://www.securityfocus.com/bid/24763
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35261
Products affected by CVE-2007-3591
-
cpe:2.3:a:elite_bulletin_board:elite_bulletin_board:1.0.8
-
cpe:2.3:a:elite_bulletin_board:elite_bulletin_board:1.0.9