CVE-2005-2571: Funkboard

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php and (2) admin/pg_install.php scripts, which allows attackers to obtain the database username and password or inject arbitrary PHP code into info.php.

Affected products

• Funkboard Funkboard: up to and including 0.66f

Published 2005-08-16. Last modified 2026-06-16.