CVE-2012-4035

PBBoard 2.1.4 is affected by multiple CVEs including CVE-2012-4035 (Improper Authentication) and CVE-2012-4036 (Improper Access Control). The CVE-2012-4035 issue arises from lack of verification of the user-supplied member_id in the password-change flow, enabling remote attackers to change arbitr...

CVE-2014-9215

PBBoard CMS

CVE-2012-1216

PBBoard 2.1.4 and likely earlier versions have multiple vulnerabilities tied to CVE-2012-1216: a CSRF flaw in admin.php that can hijack administrator sessions to perform actions (e.g., file upload via add action or file content modification via edit action), and it is linked to other issues (CVE-...

CVE-2012-4034

PBBoard 2.1.4 (and likely earlier) is affected by multiple SQL injection vulnerabilities disclosed for CVE-2012-4034. The flaws arise from unsanitised input in various POST/GET parameters processed by index.php (including username, email, password, section, section_id, member_id, and subjectid) t...

CVE-2012-4036

PBBoard 2.1.4 is affected by an unrestricted file upload in admin.php that lets remote admins upload a file with an executable extension to the addons directory and access it directly, potentially executing arbitrary PHP code. This vulnerability is tied to CVE-2012-4036 and can be leveraged via C...

CVE-2009-3649

PBBoard (Power Bulletin Board) suffers a cross-site scripting (XSS) vulnerability in forums/index.php, affecting version 2.0.2 and earlier. The issue arises in the id parameter of the "new_topic" action, allowing remote attackers to inject arbitrary web script or HTML. Affected software is PBBoar...