funkboard records
6 published records for vendor funkboard.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
27Monitor | CVE-2006-5775No exploit | Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows remote attackers to injfunkboard · funkboard | Medium6.8 | — | 1.3% | Nov 6, 2006 |
25Monitor | CVE-2005-2571No exploit | FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_instafunkboard · funkboard | Medium6.4 | — | 1.2% | Aug 16, 2005 |
23Monitor | CVE-2006-2896Proof of concept | profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profilfunkboard · funkboard | Medium5.0 | — | 9.4% | Jun 7, 2006 |
20Monitor | CVE-2005-2570No exploit | FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to forums.php,funkboard · funkboard | Medium5.0 | — | 1.2% | Aug 16, 2005 |
17Monitor | CVE-2005-2569Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote attackers to inject arbfunkboard · funkboard | Medium4.3 | — | 1.6% | Aug 16, 2005 |
11Monitor | CVE-2006-2897No exploit | Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject arbitrary HTML or web script via unspecified vefunkboard · funkboard | Low2.6 | — | 1.9% | Jun 7, 2006 |
- CVE-2006-577527Monitor
Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows remote attackers to inj
MediumCVSS 6.8No exploitEPSS 1%funkboard · funkboardNov 6, 2006
- CVE-2005-257125Monitor
FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_insta
MediumCVSS 6.4No exploitEPSS 1%funkboard · funkboardAug 16, 2005
- CVE-2006-289623Monitor
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profil
MediumCVSS 5.0Proof of conceptEPSS 9%funkboard · funkboardJun 7, 2006
- CVE-2005-257020Monitor
FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to forums.php,
MediumCVSS 5.0No exploitEPSS 1%funkboard · funkboardAug 16, 2005
- CVE-2005-256917Monitor
Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote attackers to inject arb
MediumCVSS 4.3Proof of conceptEPSS 2%funkboard · funkboardAug 16, 2005
- CVE-2006-289711Monitor
Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject arbitrary HTML or web script via unspecified ve
LowCVSS 2.6No exploitEPSS 2%funkboard · funkboardJun 7, 2006