CVE-2006-2896
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a...
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.
Exploit likelihood
What each source reports
NVD Score used
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.
- Record
CVE-2006-2896- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.
- Record
CVE-2006-2896- Updated
- 2026-11-02
EUVDEUVD-2006-2893 No score
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.
- Record
EUVD-2006-2893- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wg2p-cfwm-2hhj No score
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a...
profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action.
- Record
GHSA-wg2p-cfwm-2hhj- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | FunkBoard CF0.71 - 'profile.php' Remote User Pass Change | 2006-06-04 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2896 is a medium vulnerability (CVSS 5.0) in Funkboard, published June 7, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.36%, the 95th percentile. No source names a fixed version.
References
funkboard.co.uk/forum/thread.php?id=302
exploit-db.com/exploits/1875
exchange.xforce.ibmcloud.com/vulnerabilities/26912
securityreason.com/securityalert/1066
securityfocus.com/archive/1/435987/100/0/threaded
vupen.com/english/advisories/2006/2158
secunia.com/advisories/20433
nvd.nist.gov/vuln/detail/CVE-2006-2896
github.com/advisories/GHSA-wg2p-cfwm-2hhj