header-logo
Suggest Exploit
vendor:
Vikingboard
by:
SecurityFocus
8.8
CVSS
HIGH
Unauthorized Access
287
CWE
Product Name: Vikingboard
Affected Version From: 0.2 Beta
Affected Version To: 0.2 Beta
Patch Exists: YES
Related CWE: N/A
CPE: o:vikingsoft:vikingboard
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

Vikingboard Unauthorized Access Vulnerability

Vikingboard is prone to an unauthorized-access vulnerability which allows attackers to register and log in as existing users. This is possible by providing a username with whitespace characters followed by NULL, and a valid password and email address.

Mitigation:

Upgrade to the latest version of Vikingboard.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/31408/info

Vikingboard is prone to an unauthorized-access vulnerability.

Successfully exploiting this issue can allow attackers to register and log in as existing users.

Vikingboard 0.2 Beta is vulnerable; other versions may also be affected.

The following example account registration data is available:

Username: [username][whitespace characters]NULL
Password: [password]
E-Mail: [E-Mail]