CVE-2006-2896: Funkboard

Medium severity, CVSS 5.0. EPSS: 9.4% chance of exploitation in the next 30 days.

profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.

Affected products

• Funkboard Funkboard: version cf0.71 only

Published 2006-06-07. Last modified 2026-06-16.