CVE-2006-0406: Medium severity mybulletinboard vulnerability
Published Jan 25, 2006
·Updated
search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters.
Affected Software
1 affected component
MyBulletinBoard MyBulletinBoard=1.0.2
Event History
Jan 25, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0406?
CVE-2006-0406 has been classified with a moderate severity level due to the potential exposure of sensitive information.
2
How do I fix CVE-2006-0406?
To fix CVE-2006-0406, upgrade MyBB to a later version that has addressed this vulnerability.
3
What types of information can be leaked by CVE-2006-0406?
CVE-2006-0406 can leak sensitive information such as the database table prefix through SQL error messages.
4
Which version of MyBB is affected by CVE-2006-0406?
MyBB version 1.0.2 is specifically affected by CVE-2006-0406.
5
Who can exploit the vulnerabilities in CVE-2006-0406?
Remote attackers can exploit CVE-2006-0406 by submitting specially crafted search requests.