CVEvulnerability

CVE-2007-3591

5.0 MEDIUM Published 2007-07-06 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-07-06
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks.

Affected configurations

• elite bulletin board elite bulletin board 1.0.8 • elite bulletin board elite bulletin board 1.0.9

References

http://osvdb.org/37819 osvdb.org
http://secunia.com/advisories/25926 Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118 Patch
http://www.securityfocus.com/bid/24763 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35261 exchange.xforce.ibmcloud.com
http://osvdb.org/37819 osvdb.org
http://secunia.com/advisories/25926 Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118 Patch
http://www.securityfocus.com/bid/24763 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35261 exchange.xforce.ibmcloud.com