CVE-2012-4954
EUVD-2012-487915.11.2012, 11:58
The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related to a "parameter manipulation" issue.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| vanillaforums | vanilla | 𝑥 ≤ 2.0.18.4 |
| vanillaforums | vanilla | 2.0.0 |
| vanillaforums | vanilla | 2.0.1 |
| vanillaforums | vanilla | 2.0.2 |
| vanillaforums | vanilla | 2.0.3 |
| vanillaforums | vanilla | 2.0.4 |
| vanillaforums | vanilla | 2.0.5 |
| vanillaforums | vanilla | 2.0.6 |
| vanillaforums | vanilla | 2.0.7 |
| vanillaforums | vanilla | 2.0.8 |
| vanillaforums | vanilla | 2.0.9 |
| vanillaforums | vanilla | 2.0.10 |
| vanillaforums | vanilla | 2.0.11 |
| vanillaforums | vanilla | 2.0.12 |
| vanillaforums | vanilla | 2.0.13 |
| vanillaforums | vanilla | 2.0.14 |
| vanillaforums | vanilla | 2.0.15 |
| vanillaforums | vanilla | 2.0.16 |
| vanillaforums | vanilla | 2.0.16.1 |
| vanillaforums | vanilla | 2.0.17 |
| vanillaforums | vanilla | 2.0.17.1 |
| vanillaforums | vanilla | 2.0.17.2 |
| vanillaforums | vanilla | 2.0.17.3 |
| vanillaforums | vanilla | 2.0.17.4 |
| vanillaforums | vanilla | 2.0.17.5 |
| vanillaforums | vanilla | 2.0.17.6 |
| vanillaforums | vanilla | 2.0.17.7 |
| vanillaforums | vanilla | 2.0.17.8 |
| vanillaforums | vanilla | 2.0.17.9 |
| vanillaforums | vanilla | 2.0.17.10 |
| vanillaforums | vanilla | 2.0.18 |
| vanillaforums | vanilla | 2.0.18:alpha3 |
| vanillaforums | vanilla | 2.0.18:beta1 |
| vanillaforums | vanilla | 2.0.18:beta2 |
| vanillaforums | vanilla | 2.0.18:beta4 |
| vanillaforums | vanilla | 2.0.18:rc1 |
| vanillaforums | vanilla | 2.0.18:rc2 |
| vanillaforums | vanilla | 2.0.18:rc3 |
| vanillaforums | vanilla | 2.0.18.1 |
| vanillaforums | vanilla | 2.0.18.3 |
| vanillaforums | vanilla_forums | 𝑥 ≤ 2.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration