7.5
CVE-2006-1111
- EPSS 1.15%
- Veröffentlicht 09.03.2006 13:06:00
- Zuletzt bearbeitet 16.06.2026 22:22:02
- Erkennungen
LoginAztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aztek Forum ≫ Aztek Forum Version 4.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.15% | 0.628 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://www.securityfocus.com/archive/1/426650/100/0/threaded
http://www.securityfocus.com/bid/16938
https://www.exploit-db.com/exploits/1547
http://www.osvdb.org/23611
https://exchange.xforce.ibmcloud.com/vulnerabilities/25036