PT-2006-6911 · Vikingboard · Vikingboard

Benjamin Moss + 1 · Publicado 2006-12-04 · Atualizado 2018-10-17 · CVE-2006-6282

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Vikingboard version 0.1.2

Description The issue allows remote attackers to trigger a forced SQL error via an invalid s parameter in the members.php file. This might only be an exposure if display errors is enabled.

Recommendations For Vikingboard version 0.1.2, consider disabling the display of error messages to minimize the risk of exploitation. Restrict access to the members.php file to prevent remote attackers from triggering SQL errors. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-6282

Produtos afetados

Vikingboard

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/30386 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6282 · Nota de Segurança
• http://securityreason.com/securityalert/1966 · Nota
• http://securityfocus.com/bid/21196 · Nota
• http://securityfocus.com/archive/1/452018/100/200/threaded · Nota