CVE-2007-5988

no score yetEPSS 1.5%

blocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbitrary users via a modified nick field.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWEs: CWE-255, CWE-264, CWE-287
Published: 2007-11-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bti-tracker:bti-tracker

References

http://osvdb.org/42216
http://secunia.com/advisories/27550
http://sourceforge.net/project/shownotes.php?release_id=552477
http://sourceforge.net/tracker/index.php?func=detail&aid=1764809&group_id=146822&atid=766508
http://www.securityfocus.com/bid/26551

Check your stack JSON