GCVE-110-CERTCC-2012-611988

Advisory PublishedCVSS 6.3/10

Vulnetix · Advisory published November 12, 2012

Vanilla Forums version 2.1.a26 and possibly other versions is vulnerable to parameter manipulation via the "edit profile" page of authenticated users.

Download JSON Open in Console

Risk Scores

CVSS 2.0

6.3/10

Medium · AV:N/AC:M/Au:S/C:N/I:C/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score4.8remediation_levelUreport_confidenceUCenvironmental_score1.3target_distributionLenvironmental_vectorCDP:L/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2012-4954

References

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

url

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

advisory

Browse GCVE Records

75,726 records in the GCVE database · Updated August 1, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON