CVE-2006-2897

概要

参考情報

• secunia.com/advisories/20433 · Exploit
• funkboard.co.uk/forum/thread.php · Patch
• vupen.com/english/advisories/2006/2158
• exchange.xforce.ibmcloud.com/vulnerabilities/27084

funkboard のその他の脆弱性

• CVE-2006-5775中 6.8Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows remote attackers to inj…
• CVE-2006-2896中 5.0profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profil…
• CVE-2005-2571中 6.4FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_insta…
• CVE-2005-2570中 5.0FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to forums.php,…
• CVE-2005-2569中 4.3Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote attackers to inject arb…