6.4
CVSSv2

CVE-2005-2571

Published: 16/08/2005 Updated: 18/10/2016
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_install.php scripts, which allows malicious users to obtain the database username and password or inject arbitrary PHP code into info.php.

Vulnerable Product Search on Vulmon Subscribe to Product

funkboard funkboard