CVE
- Id
- 13777
- CVE No.
- CVE-2005-2571
- Status
- Candidate
- Description
- FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_install.php scripts, which allows attackers to obtain the database username and password or inject arbitrary PHP code into info.php.
- Phase
- Assigned (20050816)
- Votes
- None (candidate not yet proposed)
- Comments