CVE-2006-1111

HIGH 7.5CVE-2006-1111 · Published 09/03/2006 · updated 16/06/2026

In short

CVE-2006-1111 is a HIGH (CVSS 7.5) vulnerability affecting aztek forum (aztek forum).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aztek forum aztek_forum	`= 4.0`	No fix yet

Description

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection.

References

osvdb.org/23611 · Exploit
securityfocus.com/archive/1/426650/100/0/threaded
securityfocus.com/bid/16938 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/25036
exploit-db.com/exploits/1547

More vulnerabilities in aztek forum

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

aztek forum

aztek_forum

= 4.0

No fix yet

More vulnerabilities in aztek forum

See all →