PT-2012-5160 · Pbboard · Pbboard

CVE-2012-4035 · Publicado 2012-08-12 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PBBoard version 2.1.4

Description The issue allows remote attackers to change the password of arbitrary user accounts. This is achieved by exploiting the new password page, specifically through the member id and new password parameters to the "index.php" endpoint.

Recommendations For PBBoard version 2.1.4, consider restricting access to the new password page until a fix is available, and avoid using the member id and new password parameters in the "index.php" endpoint to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-4035

Produtos afetados

Pbboard

Referências · 9

• 🔥 http://securityfocus.com/bid/54916 · Exploit
• 🔥 https://exploit-db.com/exploits/37615 · Exploit
• 🔥 https://htbridge.com/advisory/HTB23101 · Exploit
• http://pbboard.com/forums/t10353.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-4035 · Nota de Segurança
• http://secunia.com/advisories/50153 · Aviso do Fabricante
• http://osvdb.org/84481 · Nota
• http://pbboard.com/forums/t10352.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77506 · Nota