3.5

CVE-2012-4954

The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related to a "parameter manipulation" issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Vanillaforums ≫ Vanilla Version <= 2.0.18.4
Vanillaforums ≫ Vanilla Version 2.0.0
Vanillaforums ≫ Vanilla Version 2.0.1
Vanillaforums ≫ Vanilla Version 2.0.2
Vanillaforums ≫ Vanilla Version 2.0.3
Vanillaforums ≫ Vanilla Version 2.0.4
Vanillaforums ≫ Vanilla Version 2.0.5
Vanillaforums ≫ Vanilla Version 2.0.6
Vanillaforums ≫ Vanilla Version 2.0.7
Vanillaforums ≫ Vanilla Version 2.0.8
Vanillaforums ≫ Vanilla Version 2.0.9
Vanillaforums ≫ Vanilla Version 2.0.10
Vanillaforums ≫ Vanilla Version 2.0.11
Vanillaforums ≫ Vanilla Version 2.0.12
Vanillaforums ≫ Vanilla Version 2.0.13
Vanillaforums ≫ Vanilla Version 2.0.14
Vanillaforums ≫ Vanilla Version 2.0.15
Vanillaforums ≫ Vanilla Version 2.0.16
Vanillaforums ≫ Vanilla Version 2.0.16.1
Vanillaforums ≫ Vanilla Version 2.0.17
Vanillaforums ≫ Vanilla Version 2.0.17.1
Vanillaforums ≫ Vanilla Version 2.0.17.2
Vanillaforums ≫ Vanilla Version 2.0.17.3
Vanillaforums ≫ Vanilla Version 2.0.17.4
Vanillaforums ≫ Vanilla Version 2.0.17.5
Vanillaforums ≫ Vanilla Version 2.0.17.6
Vanillaforums ≫ Vanilla Version 2.0.17.7
Vanillaforums ≫ Vanilla Version 2.0.17.8
Vanillaforums ≫ Vanilla Version 2.0.17.9
Vanillaforums ≫ Vanilla Version 2.0.17.10
Vanillaforums ≫ Vanilla Version 2.0.18
Vanillaforums ≫ Vanilla Version 2.0.18 Update alpha3
Vanillaforums ≫ Vanilla Version 2.0.18 Update beta1
Vanillaforums ≫ Vanilla Version 2.0.18 Update beta2
Vanillaforums ≫ Vanilla Version 2.0.18 Update beta4
Vanillaforums ≫ Vanilla Version 2.0.18 Update rc1
Vanillaforums ≫ Vanilla Version 2.0.18 Update rc2
Vanillaforums ≫ Vanilla Version 2.0.18 Update rc3
Vanillaforums ≫ Vanilla Version 2.0.18.1
Vanillaforums ≫ Vanilla Version 2.0.18.3
Vanillaforums ≫ Vanilla Forums Update a26 Version <= 2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.07% 0.604
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.kb.cert.org/vuls/id/611988
US Government Resource
http://www.securityfocus.com/bid/56483
https://exchange.xforce.ibmcloud.com/vulnerabilities/80000