CVE

Id
26948  
CVE No.
CVE-2007-3591  
Status
Candidate  
Description
Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks.  
Phase
Assigned (20070706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
275035 26948 CVE-2007-3591 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118  View
275036 26948 CVE-2007-3591 BID:24763  View
275037 26948 CVE-2007-3591 URL:http://www.securityfocus.com/bid/24763  View
275038 26948 CVE-2007-3591 OSVDB:37819  View
275039 26948 CVE-2007-3591 URL:http://osvdb.org/37819  View
275040 26948 CVE-2007-3591 SECUNIA:25926  View
275041 26948 CVE-2007-3591 URL:http://secunia.com/advisories/25926  View
275042 26948 CVE-2007-3591 XF:elite-profile-data-manipulation(35261)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53600 JVNDB-2007-002292 ManageEngine NetFlow Analyzer におけるクロスサイトスクリプティングの脆弱性 ManageEngine NetFlow Analyzer には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3593 26948 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002292.html  View