Description
members.php in Vikingboard 0.1.2 allows remote attackers to trigger a forced SQL error via an invalid s parameter, a different vector than CVE-2006-4709. NOTE: might only be an exposure if display_errors is enabled, but due to lack of details, even this is not clear.
Metrics
CVSS 2.0 9.3/10
AV:N/AC:M/Au:N/C:C/I:C/A:CAffected software
No affected versions have been published.
Timeline
- Published
- Dec 4, 2006
- Last modified
- Jun 16, 2026
- NVD status
- Modified