CVE-2007-6399 | BDVDB-2026-28239 Detail

Description#

index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current user account by reading the password parameter value in the HTML source for the page generated by a profile action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/44118
http://www.securityfocus.com/archive/1/484803/100/100/threaded
https://www.exploit-db.com/exploits/4705
http://www.securityfocus.com/bid/26782

Exploit#

https://www.exploit-db.com/exploits/4705

History#

Version 12007-12-17Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.