CVE-2005-4688
PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked logi…
Published: 2006-02-01 · CVSS: Unscored
PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7