Unscored severity · published Jul 6, 2007
CVE-2007-3592
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields
–
CVSS
1.1%
EPSS
No
On KEV
Description
PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EB
Elite Bulletin Board · Elite Bulletin Board
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3592
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3592
osvdb.org
http://osvdb.org/37820
Vendor Advisory
http://secunia.com/advisories/25926
Patch
http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118
www.securityfocus.com
http://www.securityfocus.com/bid/24763
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35262
More from Elite Bulletin Board
–
CVE-2007-3591
Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote…