CVE-2007-6399

no score yetEPSS 2.1%

index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current user account by reading the password parameter value in the HTML source for the page generated by a profile action.

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-255
Published: 2007-12-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

myupb:flat_php_board

References

http://osvdb.org/44118
http://www.securityfocus.com/archive/1/484803/100/100/threaded
http://www.securityfocus.com/bid/26782
https://www.exploit-db.com/exploits/4705
http://osvdb.org/44118

Check your stack JSON