Unscored severity · published Jul 6, 2007
CVE-2007-3591
Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EB
Elite Bulletin Board · Elite Bulletin Board
1.0.8; 1.0.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3591
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3591
osvdb.org
http://osvdb.org/37819
Vendor Advisory
http://secunia.com/advisories/25926
Patch
http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118
www.securityfocus.com
http://www.securityfocus.com/bid/24763
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35261
More from Elite Bulletin Board
–
CVE-2007-3592
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields