CVE-2007-3591

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-06 · updated 2026-06-16

Description

Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks.

Affected products

Elite Bulletin Board: 1.0.8, 1.0.9

References

http://osvdb.org/37819
http://secunia.com/advisories/25926
http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118
http://www.securityfocus.com/bid/24763
https://exchange.xforce.ibmcloud.com/vulnerabilities/35261
http://osvdb.org/37819
http://secunia.com/advisories/25926
http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118
http://www.securityfocus.com/bid/24763
https://exchange.xforce.ibmcloud.com/vulnerabilities/35261

Get alerted when CVE-2007-3591 or the next vulnerability affects your stack