Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Vikingboard 0.1.2 could reveal database errors to attackers

CVE-2006-6282 · published 19 years ago
Summary

The members.php page in Vikingboard version 0.1.2 can be tricked into generating a database error when given a bad input. If the server is set to show error details, this may expose information about the system to anyone on the internet. Fix it by turning off error display and applying any available updates or patches.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
vikingboard vikingboard 0.1.2
cpe:2.3:a:vikingboard:vikingboard:0.1.2:*:*:*:*:*:*:*
Original advisory text
members.php in Vikingboard 0.1.2 allows remote attackers to trigger a forced SQL error via an invalid s parameter, a different vector than CVE-2006-4709. NOTE: might only be an exposure if display...
members.php in Vikingboard 0.1.2 allows remote attackers to trigger a forced SQL error via an invalid s parameter, a different vector than CVE-2006-4709. NOTE: might only be an exposure if display_errors is enabled, but due to lack of details, even this is not clear.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
2% chance of attack within 30 days
Timeline
Published4 Dec 2006
Updated1 Nov 2026
First seen29 Sep 2026
Sources
CVE-2006-6282 · NVD
Track software like this
Free during beta