CVE-2006-6457

{"id": "CVE-2006-6457", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-12-11T17:28:00.000", "references": [{"url": "http://www.securityfocus.com/archive/1/452639/100/200/threaded", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "tiki-wiki_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly other versions allows remote attackers to obtain sensitive information (MySQL username and password) via an invalid (large or negative) ver parameter, which leaks the information in an error message."}, {"lang": "es", "value": "tiki-wiki_rss.php en Tikiwiki 1.9.5, 1.9.2, y posiblemente otras versiones permite a atacantes remotos obtener informaci\u00f3n sensible (nombre de usuario y contrase\u00f1a MySQL) mediante un par\u00e1metro ver inv\u00e1lido (largo o negativo), lo cual filtra la informaci\u00f3n en un mensaje de error."}], "lastModified": "2018-10-17T21:48:15.330", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "035EEFAB-B46C-407F-BF8C-B33756D4EEC3"}, {"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F437662-CD55-477B-9FEE-0CC4E6CB908D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}