Description
index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified page_name parameter, which reflects portions of an SQL query in the result. NOTE: it is not clear whether the information is target-specific. If not, then this issue is not an exposure.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2006-3605 | index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified page_name parameter, which reflects portions of an SQL query in the result. NOTE: it is not clear whether the information is target-specific. If not, then this issue is not an exposure. |
References
| Link | Providers |
|---|---|
| http://www.securityfocus.com/archive/1/439970/100/0/threaded |
|
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T18:39:52.591Z
Reserved: 2006-07-14T00:00:00.000Z
Link: CVE-2006-3610
No data.
Status : Modified
Published: 2006-07-18T15:46:00.000
Modified: 2026-06-16T22:27:25.027
Link: CVE-2006-3610
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD