CVE-2007-3592: Elite Bulletin Board

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields.

Affected products

Published 2007-07-06. Last modified 2026-06-16.