PT-2006-6911 · Vikingboard · Vikingboard

Benjamin Moss + 1 · Published 2006-12-04 · Updated 2018-10-17 · CVE-2006-6282

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Vikingboard version 0.1.2

Description The issue allows remote attackers to trigger a forced SQL error via an invalid s parameter in the members.php file. This might only be an exposure if display errors is enabled.

Recommendations For Vikingboard version 0.1.2, consider disabling the display of error messages to minimize the risk of exploitation. Restrict access to the members.php file to prevent remote attackers from triggering SQL errors. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-6282

Affected Products

Vikingboard

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-6282 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30386 · Note
• http://securityreason.com/securityalert/1966 · Note
• http://securityfocus.com/bid/21196 · Note
• http://securityfocus.com/archive/1/452018/100/200/threaded · Note