NVD

Id
54134  
Name
CVE-2007-1964  
Description
member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any account by providing the account"s registered e-mail address in a debug request for a do_lostpw action, which prints the change password verification code in the debug output.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-11  
Modified Date
2012-11-05  
Seq
2007-1964  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274533 54134 CVE-2007-1964 2544  View
274534 54134 CVE-2007-1964 20070330 Mybb Change Password Vulnerability  View
274535 54134 CVE-2007-1964 mybb-debugmode-information-disclosure(33345)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54979 JVNDB-2007-003671 MyBB の member.php における任意のアカウントのパスワードを変更される脆弱性 MyBB の member.php には、デバックモードが利用可能になっている際、デバッグ出力内にパスワード変更の確認コードを印字するため、任意のアカウントのパスワードを変更される脆弱性が存在します。 CVE-2007-1964 25319 CVE-2007-1964 54134 6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003671.html 2007-04-11 2012-09-25 View