Vikingboard
Approved changes feed: RSS · Atom
cpe:2.3:a:vikingboard:vikingboard:0.1.2:*:*:*:*:*:*:*part: a version: 0.1.2 update: *
| Vendor | Vikingboard (4de29c61-b7c2-5d1a-836e-248dd51db42c) |
|---|---|
| Product | Vikingboard (0927d1ce-00e3-5fb0-90b4-a45f2e531cea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-4090 |
vulnerable | 2026-06-08 04:49:55.656894 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to inc/lib/screen.php or (2) the title parameter to post.php. NOTE: vector 2 might overlap CVE-2006-6283. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2007-07-30T17:00:00.000Z
Updated: 2024-08-07T14:46:38.529Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4089 |
vulnerable | 2026-06-08 04:49:55.656437 |
Details available
Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2) cp.php, and possibly other unspecified components.
Published: 2007-07-30T17:00:00.000Z
Updated: 2024-08-07T14:46:37.320Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4088 |
vulnerable | 2026-06-08 04:49:55.655977 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) f, (3) quote, and (4) act parameters to cp.php; the (5) u parameter to user.php; the (6) f parameter to post.php; the (7) s parameter to topic.php; the (8) quote, (9) t, (10) poll, and (11) p parameters to post.php; the (12) Message Title field of a private message (PM) in mode 6 of cp.php; the (13) title field of a private message (PM) in mode 7 of cp.php; and (14) allow user-assisted remote attackers to inject arbitrary web script or HTML via a dosearch action to search.php, which reflects the first lines of all posts by a user. NOTE: the act parameter to help.php and the p parameter to report.php are already covered by CVE-2006-4708. NOTE: vectors 12 and 13 might overlap CVE-2006-6283.1. NOTE: vector 14 might overlap CVE-2006-4708.b.
Published: 2007-07-30T17:00:00.000Z
Updated: 2024-08-07T14:46:39.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6284 |
vulnerable | 2026-06-08 04:49:22.429707 |
Details available
Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. (dot dot) sequence in the act parameter.
Published: 2006-12-04T11:00:00.000Z
Updated: 2024-08-07T20:19:35.132Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6283 |
vulnerable | 2026-06-08 04:49:22.429376 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the subject field of (1) a private message (PM) or (2) a bulletin board post.
Published: 2006-12-04T11:00:00.000Z
Updated: 2024-08-07T20:19:35.128Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6282 |
vulnerable | 2026-06-08 04:49:22.428963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.