NVD

Id
64277  
Name
CVE-2006-5702  
Description
Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1) tiki-listpages.php, (2) tiki-lastchanges.php, (3) messu-archive.php, (4) messu-mailbox.php, (5) messu-sent.php, (6) tiki-directory_add_site.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-forums.php, (10) tiki-view_forum.php, (11) tiki-friends.php, (12) tiki-list_blogs.php, (13) tiki-list_faqs.php, (14) tiki-list_trackers.php, (15) tiki-list_users.php, (16) tiki-my_tiki.php, (17) tiki-notepad_list.php, (18) tiki-orphan_pages.php, (19) tiki-shoutbox.php, (20) tiki-usermenu.php, and (21) tiki-webmail_contacts.php, which reveal the information in certain database error messages.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-11-03  
Modified Date
2012-10-24  
Seq
2006-5702  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
335269 64277 CVE-2006-5702 GLSA-200611-11  View
335270 64277 CVE-2006-5702 1816  View
335271 64277 CVE-2006-5702 20061101 tikiwiki 1.9.5 mysql password disclosure & xss  View
335272 64277 CVE-2006-5702 20858  View
335273 64277 CVE-2006-5702 ADV-2006-4316  View
335274 64277 CVE-2006-5702 tikiwiki-password-info-disclosure(29960)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61133 JVNDB-2006-003399 Tikiwiki における重要な情報 (MySQL ユーザ名およびパスワード) を取得される脆弱性 Tikiwiki は、特定のデータベースエラーメッセージ内に情報を表示するため、重要な情報 (MySQL ユーザ名およびパスワード) を取得される脆弱性が存在します。 CVE-2006-5702 21804 CVE-2006-5702 64277 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003399.html 2006-11-03 2012-12-20 View