VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 11, 2006· Updated Jun 16, 2026

CVE-2006-6457

CVE-2006-6457

Description

tiki-wiki_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly other versions allows remote attackers to obtain sensitive information (MySQL username and password) via an invalid (large or negative) ver parameter, which leaks the information in an error message.

Affected products

3
  • Tiki/Tikiwiki CMS\/groupware2 versions
    cpe:2.3:a:tiki:tikiwiki_cms\/groupware:1.9.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:tiki:tikiwiki_cms\/groupware:1.9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:tiki:tikiwiki_cms\/groupware:1.9.5:*:*:*:*:*:*:*
  • Tiki/Tikillm-fuzzy
    Range: <=1.9.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.