NVD

Id
57004  
Name
CVE-2007-4914  
Description
Unspecified vulnerability in the subscriptions manager in Invision Power Board (IPB or IP.Board) 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to (1) class_gw_2checkout.php, (2) class_gw_authorizenet.php, (3) class_gw_nochex.php, (4) class_gw_paypal.php, and (5) class_gw_safshop.php in sources/classes/paymentgateways/.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-09-17  
Modified Date
2008-11-15  
Seq
2007-4914  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290963 57004 CVE-2007-4914 http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870  View
290964 57004 CVE-2007-4914 http://forums.invisionpower.com/index.php?showtopic=237075  View
290965 57004 CVE-2007-4914 25656  View
290966 57004 CVE-2007-4914 ipb-subscription-unauthorized-access(36590)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55697 JVNDB-2007-004389 IP.Board のサブスクリプションマネージャにおけるメンバ ID を変更される脆弱性 Invision Power Board (IPB or IP.Board) のサブスクリプションマネージャは、以下のファイルに不備があるため、メンバ ID を変更される、および任意ユーザの権限レベルを降格される脆弱性が存在します。 CVE-2007-4914 28269 CVE-2007-4914 57004 6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004389.html 2007-09-12 2012-09-25 View