CoreCVE
Back

MEDIUM

tiki-wiki_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly other versions allows remote attackers to obtain sensitive information (MySQL username and password) via an invalid (large or negative) ver parameter, which leaks the information in an error message

Published Dec 11, 2006

Description

tiki-wiki_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly other versions allows remote attackers to obtain sensitive information (MySQL username and password) via an invalid (large or negative) ver parameter, which leaks the information in an error message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Dec 11, 2006
Updated Aug 7, 2024
Reserved Dec 11, 2006
Link CVE-2006-6457

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 16, 2026
Link CVE-2006-6457

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Dec 11, 2006
Updated Aug 7, 2024
Link EUVD-2006-6440

GitHub

No data