Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2012-4036
HistoryAug 27, 2012 - 11:55 p.m.

CVE-2012-4036

2012-08-2723:55:02
mitre
web.nvd.nist.gov
31
cve-2012-4036
file upload vulnerability
pbboard 2.1.4
remote code execution
cve-2012-1216

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.092

Percentile

94.8%

JSON

Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the addons directory. NOTE: this vulnerability can be leveraged by remote attackers using CVE-2012-1216.

Affected configurations

Nvd
Node
pbboardpbboardMatch2.1.4
VendorProductVersionCPE
pbboardpbboard2.1.4cpe:2.3:a:pbboard:pbboard:2.1.4:*:*:*:*:*:*:*

Related

nvd 2
prion 2
cvelist 2
exploitdb 1
htbridge 1
packetstorm 2
zdt 2
securityvulns 2
cve 1
nvd
nvd
CVE-2012-4036
2012-08-27 23:55:02
CVE-2012-1216
2012-02-21 13:31:21
prion
prion
Unrestricted file upload
2012-08-27 23:55:00
Cross site request forgery (csrf)
2012-02-21 13:31:00
cvelist
cvelist
CVE-2012-4036
2012-08-27 23:00:00
CVE-2012-1216
2012-02-20 20:00:00
exploitdb
exploitdb
PBBoard - 'admin.php?xml_name' Arbitrary PHP Code Execution
2012-08-08 00:00:00
htbridge
htbridge
Multiple vulnerabilities in PBBoard
2012-07-18 00:00:00
packetstorm
packetstorm
PBBoard 2.1.4 SQL Injection / Improper Authentication / Broken Access Control
2012-08-09 00:00:00
PBBoard 2.1.4 Cross Site Request Forgery
2012-05-29 00:00:00
zdt
zdt
PBBoard 2.1.4 SQL Injection / Improper Authentication / Broken Access Control
2012-08-11 00:00:00
PBBoard v2.1.4 (CSRF) Arbitrary File Upload and Command Execution (MSF
2012-05-29 00:00:00
securityvulns
securityvulns
Multiple vulnerabilities in PBBoard
2012-08-13 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2012-08-13 00:00:00
cve
cve
CVE-2012-1216
2012-02-21 13:31:21

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.092

Percentile

94.8%

JSON
Related for CVE-2012-4036
nvd2prion2cvelist2exploitdb1htbridge1packetstorm2zdt2securityvulns2cve1