EDB-1875

functional

FunkBoard CF0.71 - 'profile.php' Remote User Pass Change

view exploit source exploit_dbverifiedtype webappsauthor ajannpublished 2006-06-04catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-2896USmedium5.0Exploit
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan