CVE-2007-6399 EXPLOIT
6.5
MEDIUM · CVSS 2.0 · EPSS 2.1% (pctl 81)
Patch early
A public exploit exists.
Description
index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current user account by reading the password parameter value in the HTML source for the page generated by a profile action.
Scoring
| CVSS | 6.5 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| EPSS | 2.07% — more likely to be exploited than 81% of all CVEs |
| Weakness | CWE-255 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-12-17 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| myupb | flat php board |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Flat PHP Board 1.2 - Multiple Vulnerabilities | 2007-12-09 |
References
- http://osvdb.org/44118
- http://www.securityfocus.com/archive/1/484803/100/100/threaded
- http://www.securityfocus.com/bid/26782
- https://www.exploit-db.com/exploits/4705
- http://osvdb.org/44118
- http://www.securityfocus.com/archive/1/484803/100/100/threaded
- http://www.securityfocus.com/bid/26782
- https://www.exploit-db.com/exploits/4705
→ the Explorer · watch your stack · NVD