PatchTheCVEfunkboard vulnerabilities
Recent CVEs affecting funkboard products. 6 tracked.
funkboard has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2006-11-06. Highest priority: CVE-2006-2896 (score 46/100).
- CVE-2006-5775 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT
- CVE-2006-2897 LOW 2.6 UPGRADE Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject arbitrary HTML or
- CVE-2006-2896 MEDIUM 5.0 DOWNGRADE profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidde
- CVE-2005-2571 MEDIUM 6.4 UPGRADE FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_inst
- CVE-2005-2570 MEDIUM 5.0 DOWNGRADE FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a
- CVE-2005-2569 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow
FAQ
How do I fix funkboard vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is funkboard being exploited right now?
None of the tracked funkboard CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which funkboard CVE should I patch first?
CVE-2006-2896 currently ranks highest (46/100): profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidde.