PT-2012-5687

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.1a32 Description The issue allows remote authenticated users to modify arbitrary profile settings by manipulating the UserID value during a man-in-the-middle attack, related to a "parameter manipulation" issu...

CVE-2012-4954: Undefined Security Weakness

The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related to a "parameter manipulation" issue...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profile settings and gain privileges as other users via a link or IMG tag to the user edit profile page...