Description
members.php in Vikingboard 0.1.2 allows remote attackers to trigger a forced SQL error via an invalid s parameter, a different vector than CVE-2006-4709. NOTE: might only be an exposure if display_errors is enabled, but due to lack of details, even this is not clear.
References
- 20061118 Vikingboard (0.1.2) [ multiples vulnerability ] mailing-list
- vikingboard-members-information-disclosure(30386) vdb-entry
- 21196 vdb-entry
- 1966 third-party-advisory