PT-2007-5292 · Vikingboard · Vikingboard

Published 2007-07-30 · Updated 2017-07-29 · CVE-2007-4089

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Vikingboard version 0.1.2

Description The issue allows remote attackers to obtain sensitive information by exploiting the debug parameter in various components, including the "/forum.php" and "/cp.php" API endpoints.

Recommendations For Vikingboard version 0.1.2, consider disabling access to the debug parameter in the affected API endpoints, such as "/forum.php" and "/cp.php", until a patch is available. Restrict access to these endpoints to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-4089

Affected Products

Vikingboard

References · 11

• 🔥 https://exploit-db.com/exploits/30388 · Exploit
• 🔥 http://lostmon.blogspot.com/2007/07/vikingboard-debug-information.html · Exploit
• 🔥 http://lostmon.blogspot.com/2007/07/vikingboard-multiple-cross-site.html · Exploit
• 🔥 https://exploit-db.com/exploits/30387 · Exploit
• http://secunia.com/advisories/26196 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4089 · Security Note
• http://secwatch.org/advisories/1018567 · Note
• http://osvdb.org/36903 · Note
• http://securityfocus.com/bid/25060 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35602 · Note
• http://osvdb.org/36902 · Note