PT-2005-3462 · Funkboard · Funkboard

Retrogod · Published 2005-08-16 · Updated 2016-10-18 · CVE-2005-2571

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions FunkBoard versions 0.66CF and earlier

Description The issue allows attackers to obtain the database username and password or inject arbitrary PHP code into info.php due to improper access restriction to the "admin/mysql install.php" and "admin/pg install.php" API endpoints.

Recommendations For FunkBoard versions 0.66CF and earlier, restrict access to the admin/mysql install.php and admin/pg install.php scripts to prevent unauthorized access and potential code injection.

Fix

Related Identifiers

CVE-2005-2571

Affected Products

Funkboard

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-2571 · Security Note
• http://funkboard.co.uk/forum/thread.php?id=265 · Note
• http://marc.info/?l=bugtraq&m=112413891603018&w=2 · Note
• http://marc.info/?l=bugtraq&m=112360702307424&w=2 · Note