Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the fbusername or fbpassword parameter to (1) editpost.php, (2) prefs.php, (3) newtopic.php, (4) reply.php, or (5) profile.php, the (6) fbusername, (7) fmail, (8) www, (9) icq, (10) yim, (11) location, (12) sex, (13) interebbies, (14) sig or (15) aim parameter to register.php, or (16) subject parameter to newtopic.php.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2005-2569
- 2026-10-03 Alias added: GHSA-h28c-j23j-hm92
References
Other 2
- 20050808 FunkBoard V0.66CF (possibly prior versions) cross site scripting, possible database username/password disclosure & board takeover, possible remote code execution
- 20050813 Re: FunkBoard V0.66CF (possibly prior versions) cross site scripting, possible database username/password disclosure & board takeover, possible remote code execution
More Funkboard vulnerabilities
- TI-2006-02804 profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via… CVSS 2.0MEDIUM 5.0
- TI-2006-05559 Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4… CVSS 2.0MEDIUM 6.8
- TI-2005-02436 FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the… CVSS 2.0MEDIUM 6.4
- TI-2005-02435 FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain… CVSS 2.0MEDIUM 5.0
- TI-2006-02805 Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to… CVSS 2.0LOW 2.6
Sources
- CVE-2005-2569 · CVE Program
- CVE-2005-2569 · NVD
- FIRST EPSS
- GHSA-h28c-j23j-hm92 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences