medium4.3Public exploit code
CVE-2007-4089
Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2) cp.php, and possibly other unspecified …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vikingboard 0.1.2 - 'cp.php' Information Disclosure2007-07-25 · webapps · php · Verified
- Vikingboard 0.1.2 - 'forum.php' Information Disclosure2007-07-25 · webapps · php · Verified
Impact
Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2) cp.php, and possibly other unspecified components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vikingboard | Vikingboard | Version 0.1.2 |
References
- NVD record
- CVE.org record
- http://lostmon.blogspot.com/2007/07/vikingboard-debug-information.html
- http://lostmon.blogspot.com/2007/07/vikingboard-multiple-cross-site.html
- http://osvdb.org/36902
- http://osvdb.org/36903
- http://secunia.com/advisories/26196
- http://secwatch.org/advisories/1018567/
- http://www.securityfocus.com/bid/25060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35602
- http://lostmon.blogspot.com/2007/07/vikingboard-debug-information.html
- http://lostmon.blogspot.com/2007/07/vikingboard-multiple-cross-site.html
- http://osvdb.org/36902
- http://osvdb.org/36903
- http://secunia.com/advisories/26196
- http://secwatch.org/advisories/1018567/
- http://www.securityfocus.com/bid/25060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35602