CVE-2012-4035

CVE-2012-4035 describes a critical vulnerability in PBBoard version 2.1.4, allowing remote attackers to arbitrarily change user account passwords. This is achieved by manipulating the member_id and new_password parameters on the new_password page. With a CVSS score of 7.5, this vulnerability is highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or experiencing widespread community discussion, an exploit is publicly available on ExploitDB, indicating a clear path for exploitation.