Improper Access Control in FunkBoard 0.66CF and Earlier Versions

CVE-2005-2571 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:P/A:N

FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_install.php scripts, which allows attackers to obtain the database username and password or inject arbitrary PHP code into info.php.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.