Lucene search

[email protected]CVE-2005-3777

HistoryNov 23, 2005 - 1:03 a.m.

CVE-2005-3777

2005-11-2301:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-3777

mybulletinboard

mybb

remote attackers

private messages

inbox form

security vulnerability

7.5 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

80.1%

JSON

MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form.

CPENameOperatorVersion
mybulletinboard:mybulletinboardmybulletinboardeqpreview_release_2_rev_686

CPE	Name	Operator	Version
mybulletinboard:mybulletinboard	mybulletinboard	eq	preview_release_2_rev_686

References

marc.info/?l=bugtraq&m=113198945111329&w=2

secunia.com/advisories/17577/

securityreason.com/securityalert/175

7.5 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

80.1%

JSON