CVE-2012-4036

概要

参考情報

• osvdb.org/84479
• secunia.com/advisories/50153 · Vendor Advisory
• pbboard.com/forums/t10352.html · Vendor Advisory
• pbboard.com/forums/t10353.html · Exploit
• securityfocus.com/bid/54916 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/77508
• htbridge.com/advisory/HTB23101

pbboard のその他の脆弱性

• CVE-2014-9215高 7.5SQL injection vulnerability in the CheckEmail function in includes/functions.class.php in PBBoard 3.0.1 before 20141128 allows remote attack…
• CVE-2012-4035高 7.5The new_password page in PBBoard 2.1.4 allows remote attackers to change the password of arbitrary user accounts via the member_id and new_p…
• CVE-2012-4034高 7.5Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the (1) username parame…
• CVE-2012-1216中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication…
• CVE-2009-3649中 4.3Cross-site scripting (XSS) vulnerability in forums/index.php in Power Bulletin Board (PBBoard) 2.0.2 and possibly earlier allows remote atta…