{ "schema_version": "1.4.0", "id": "GHSA-9v8q-h77v-w42w", "modified": "2022-05-01T02:09:36Z", "published": "2022-05-01T02:09:36Z", "aliases": [ "CVE-2005-2571" ], "details": "FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_install.php scripts, which allows attackers to obtain the database username and password or inject arbitrary PHP code into info.php.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2571" }, { "type": "WEB", "url": "http://marc.info/?l=bugtraq&m=112360702307424&w=2" }, { "type": "WEB", "url": "http://marc.info/?l=bugtraq&m=112413891603018&w=2" }, { "type": "WEB", "url": "http://www.funkboard.co.uk/forum/thread.php?id=265" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2005-08-16T04:00:00Z" } }