CVE-2006-2897

Description

References

• secunia.com/advisories/20433 · Exploit
• funkboard.co.uk/forum/thread.php · Patch
• vupen.com/english/advisories/2006/2158
• exchange.xforce.ibmcloud.com/vulnerabilities/27084

funkboard 的其他漏洞

• CVE-2006-5775中危 6.8Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows remote attackers to inj…
• CVE-2006-2896中危 5.0profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profil…
• CVE-2005-2571中危 6.4FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_insta…
• CVE-2005-2570中危 5.0FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to forums.php,…
• CVE-2005-2569中危 4.3Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote attackers to inject arb…