PT-2005-3462 · Funkboard · Funkboard

Retrogod · Publicado 2005-08-16 · Atualizado 2016-10-18 · CVE-2005-2571

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions FunkBoard versions 0.66CF and earlier

Description The issue allows attackers to obtain the database username and password or inject arbitrary PHP code into info.php due to improper access restriction to the "admin/mysql install.php" and "admin/pg install.php" API endpoints.

Recommendations For FunkBoard versions 0.66CF and earlier, restrict access to the admin/mysql install.php and admin/pg install.php scripts to prevent unauthorized access and potential code injection.

Correção

Identificadores relacionados

CVE-2005-2571

Produtos afetados

Funkboard

Referências · 4

• http://funkboard.co.uk/forum/thread.php?id=265 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2571 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=112413891603018&w=2 · Nota
• http://marc.info/?l=bugtraq&m=112360702307424&w=2 · Nota