CVEvulnerability

CVE-2005-2571

6.4 MEDIUM Published 2005-08-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-08-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N

Description

FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_install.php scripts, which allows attackers to obtain the database username and password or inject arbitrary PHP code into info.php.

Affected configurations

• funkboard funkboard (<= 0.66f)

References