| Max CVSS | 7.5 | Min CVSS | 6.8 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-4035 | 7.5 |
The new_password page in PBBoard 2.1.4 allows remote attackers to change the password of arbitrary user accounts via the member_id and new_password parameters to index.php.
|
14-02-2024 - 01:17 | 12-08-2012 - 00:55 | |
| CVE-2012-4036 | 6.8 |
Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the addons directo
|
14-02-2024 - 01:17 | 27-08-2012 - 23:55 | |
| CVE-2012-4034 | 7.5 |
Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to the send page, (2) email parameter to the forget page, (3) password parameter to the forum_archive page
|
14-02-2024 - 01:17 | 12-08-2012 - 00:55 |