5
CVSSv2

CVE-2005-4688

Published: 31/12/2005 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an malicious user to make an address change via a hijacked login session.

Vulnerable Product Search on Vulmon Subscribe to Product

punbb punbb 1.2.9