Lucene search
HistoryAug 12, 2012 - 12:55 a.m.
CVE-2012-4035
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.118
Percentile
95.3%
The new_password page in PBBoard 2.1.4 allows remote attackers to change the password of arbitrary user accounts via the member_id and new_password parameters to index.php.
Affected configurations
Node
pbboardpbboardMatch2.1.4
Related
cvelist
cvelist
CVE-2012-4035
2012-08-12 00:00:00
cve
cve
CVE-2012-4035
2012-08-12 00:55:01
prion
prion
Default credentials
2012-08-12 00:55:00
exploitdb
exploitdb
PBBoard - 'member_id' Validation Password Manipulation
2012-08-08 00:00:00
htbridge
htbridge
Multiple vulnerabilities in PBBoard
2012-07-18 00:00:00
securityvulns
securityvulns
Multiple vulnerabilities in PBBoard
2012-08-13 00:00:00
packetstorm
packetstorm
zdt
zdt
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.118
Percentile
95.3%
Related for NVD:CVE-2012-4035