NVD

Id
45510  
Name
CVE-2012-4034  
Description
Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to the send page, (2) email parameter to the forget page, (3) password parameter to the forum_archive page, (4) section parameter to the management page, (5) section_id parameter to the managementreply page, (6) member_id parameter to the new_password page, or (7) subjectid parameter to the tags page to index.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-11  
Modified Date
2012-08-13  
Seq
2012-4034  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228509 45510 CVE-2012-4034 http://www.pbboard.com/forums/t10352.html  View
228510 45510 CVE-2012-4034 http://www.pbboard.com/forums/t10353.html  View
228511 45510 CVE-2012-4034 54916  View
228512 45510 CVE-2012-4034 pbboard-indexscript-sql-injection(77501)  View
228513 45510 CVE-2012-4034 https://www.htbridge.com/advisory/HTB23101  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27831 JVNDB-2012-003538 PBBoard における SQL インジェクションの脆弱性 PBBoard には、SQL インジェクションの脆弱性が存在します。 CVE-2012-4034 57272 CVE-2012-4034 45510 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003538.html 2012-08-06 2012-08-14 View