CVE-2012-4954

CVE-2012-4954 describes a parameter manipulation vulnerability in Vanilla Forums prior to version 2.1a32, specifically on the edit-profile page. An authenticated attacker could exploit this by intercepting and modifying the UserID value during a man-in-the-middle attack, allowing them to alter arbitrary user profile settings. The vulnerability has a CVSS score of 3.5 (medium severity), indicating a network-based attack with medium complexity requiring authentication, resulting in partial integrity impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.