GCVE - cpe:2.3:a:pbboard:pbboard:2.1.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pbboard:pbboard:2.1.4:*:*:*:*:*:*:*

part: a version: 2.1.4 update: *

Vendor	Pbboard (`6d70592f-cc8c-53af-9602-ef65424faa41`)
Product	Pbboard (`f941d1d1-b585-5d10-a64d-ca7283004554`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/pbboard/pbboard_3.0.2`	purl2cpe	2026-06-01 10:14:57.705564
`pkg:github/pbboard/pbboard_3.0.3`	purl2cpe	2026-06-01 10:14:57.705565

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4036`	vulnerable	2026-06-08 05:02:15.672009	Details available Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the addons directory. NOTE: this vulnerability can be leveraged by remote attackers using CVE-2012-1216. Published: 2012-08-27T23:00:00.000Z Updated: 2024-08-06T20:21:04.206Z Open on db.gcve.eu Reference links https://www.htbridge.com/advisory/HTB23101 http://www.pbboard.com/forums/t10353.html https://exchange.xforce.ibmcloud.com/vulnerabilities/77508 http://www.securityfocus.com/bid/54916 http://www.pbboard.com/forums/t10352.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4035`	vulnerable	2026-06-08 05:02:15.671642	Details available The new_password page in PBBoard 2.1.4 allows remote attackers to change the password of arbitrary user accounts via the member_id and new_password parameters to index.php. Published: 2012-08-12T00:00:00.000Z Updated: 2024-08-06T20:21:04.295Z Open on db.gcve.eu Reference links https://www.htbridge.com/advisory/HTB23101 http://www.pbboard.com/forums/t10353.html http://osvdb.org/84481 http://www.securityfocus.com/bid/54916 http://www.pbboard.com/forums/t10352.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4034`	vulnerable	2026-06-08 05:02:15.671196	Details available Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to the send page, (2) email parameter to the forget page, (3) password parameter to the forum_archive page, (4) section parameter to the management page, (5) section_id parameter to the managementreply page, (6) member_id parameter to the new_password page, or (7) subjectid parameter to the tags page to index.php. Published: 2012-08-12T00:00:00.000Z Updated: 2024-08-06T20:21:04.167Z Open on db.gcve.eu Reference links https://www.htbridge.com/advisory/HTB23101 http://www.pbboard.com/forums/t10353.html http://www.securityfocus.com/bid/54916 http://www.pbboard.com/forums/t10352.html http://osvdb.org/84480	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1216`	vulnerable	2026-06-08 05:00:48.244695	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that (1) upload a file via an add action or (2) change the contents of a file via a dit action. Published: 2012-02-20T20:00:00.000Z Updated: 2024-09-16T20:02:51.634Z Open on db.gcve.eu Reference links http://packetstormsecurity.org/files/109706/PBBoard-2.1.4-Cross-Site-Request-Forgery-Shell-Upload.html http://secunia.com/advisories/47948	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Power Bulletin Board 2.1.4

Notes

PURL mappings

Vulnerability references

Contribute