Vikingboard 0.2 Beta - 'register.php' SQL Column Truncation Unauthorized Access



EKU-ID: 37333 CVE: OSVDB-ID:
Author: StAkeR Published: 2008-09-25 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/31408/info

Vikingboard is prone to an unauthorized-access vulnerability.

Successfully exploiting this issue can allow attackers to register and log in as existing users.

Vikingboard 0.2 Beta is vulnerable; other versions may also be affected.

The following example account registration data is available:

Username: [username][whitespace characters]NULL
Password: [password]
E-Mail: [E-Mail]