CVE-2007-6237 cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during a profile update, which allows remote authenticated users to change the e-mail ad...
HighCVSS 9.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during a profile update, which allows remote authenticated users to change the e-mail addresses of arbitrary accounts via a modified membercookie parameter, a different vector than CVE-2006-4078. NOTE: this can be leveraged for administrative access by requesting password-reset e-mail through a lostpw action to misc.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deluxebb | = 1.09 | No fix listed |
References
- 27794 third-party-advisory vendor-advisory
- 3416 third-party-advisory
- 20071126 DeluxeBB E-Mail Address Change Security Bypass mailing-list
- 26572 vdb-entry