Default credentials

2007-12-1718:46:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON

index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current user account by reading the password parameter value in the HTML source for the page generated by a profile action.

CPENameOperatorVersion
flat_php_boardle1.2

CPE	Name	Operator	Version
	flat_php_board	le	1.2

References

osvdb.org/44118

www.securityfocus.com/archive/1/484803/100/100/threaded

www.securityfocus.com/bid/26782

www.exploit-db.com/exploits/4705