Vulnerability Details : CVE-2006-5702

Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1) tiki-listpages.php, (2) tiki-lastchanges.php, (3) messu-archive.php, (4) messu-mailbox.php, (5) messu-sent.php, (6) tiki-directory_add_site.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-forums.php, (10) tiki-view_forum.php, (11) tiki-friends.php, (12) tiki-list_blogs.php, (13) tiki-list_faqs.php, (14) tiki-list_trackers.php, (15) tiki-list_users.php, (16) tiki-my_tiki.php, (17) tiki-notepad_list.php, (18) tiki-orphan_pages.php, (19) tiki-shoutbox.php, (20) tiki-usermenu.php, and (21) tiki-webmail_contacts.php, which reveal the information in certain database error messages.
Publish Date : 2006-11-03 Last Update Date : 2012-10-24

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Related Tweets Even more tweets Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

Cvss Score	5.0
Confidentiality Impact	Partial (There is considerable informational disclosure.)
Integrity Impact	None (There is no impact to the integrity of the system)
Availability Impact	None (There is no impact to the availability of the system.)
Access Complexity	Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication	Not required (Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	Obtain Information
CWE ID	200

- Products Affected By CVE-2006-5702

#	Product Type	Vendor	Product	Version	Update	Edition	Language
1	Application	Tiki	Tikiwiki Cms/groupware	1.9.5				Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Tiki	Tikiwiki Cms/groupware	1

- References For CVE-2006-5702

http://secunia.com/advisories/22678
SECUNIA 22678

http://secunia.com/advisories/23039
SECUNIA 23039

http://security.gentoo.org/glsa/glsa-200611-11.xml
GENTOO GLSA-200611-11

http://securityreason.com/securityalert/1816
SREASON 1816

http://www.securityfocus.com/archive/1/archive/1/450268/100/0/threaded
BUGTRAQ 20061101 tikiwiki 1.9.5 mysql password disclosure & xss

http://www.securityfocus.com/bid/20858
BID 20858 Tikiwiki Information Disclosure and Cross-Site Scripting Vulnerabilities Release Date:2006-11-26

http://www.vupen.com/english/advisories/2006/4316
VUPEN ADV-2006-4316

http://xforce.iss.net/xforce/xfdb/29960
XF tikiwiki-password-info-disclosure(29960)

- Metasploit Modules Related To CVE-2006-5702

TikiWiki Information Disclosure
A vulnerability has been reported in Tikiwiki, which can be exploited by a anonymous user to dump the MySQL user & passwd just by creating a mysql error with the "sort_mode" var. The vulnerability was reported in Tikiwiki version 1.9.5.