funkboard

Top products

The 6 most recently published vulnerabilities affecting funkboard.

• CVE-2006-5775Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows remote attackers to inject arbitrary web script or HTML, possibly via the name p...6.8Nov 6, 2006
• CVE-2006-2896profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.5.0Jun 7, 2006
• CVE-2006-2897Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject arbitrary HTML or web script via unspecified vectors.2.6Jun 7, 2006
• CVE-2005-2570FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to forums.php, which reveals the path in an error message.5.0Aug 16, 2005
• CVE-2005-2569Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the fbusername or fbpasswor...4.3Aug 16, 2005
• CVE-2005-2571FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_install.php scripts, which allows attackers to obtain the data...6.4Aug 16, 2005