Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/10/2012 Updated: 05/10/2012

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

VMScore: 195

Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading from the database.

Vulnerable Product	Search on Vulmon	Subscribe to Product
akiva webboard 8.0

# Exploit Title: Akiva Webboard 8x SQL Injection + Plaintext Passwords in Profiles # Google Dork: " /Powered by WebBoard 8"/ # Date: 30122011 # Author: Alexander Fuchs # Software Link: wwwakivacom/defaultasp?l=1&id=8 # Version: 8x # Tested on: Windows, Linux # CVE : Nope It is possible to login as administrator with admin'-- ...

CWE-255 http://secunia.com/advisories/47318 http://archives.neohapsis.com/archives/fulldisclosure/2011-12/0475.html http://www.exploit-db.com/exploits/18293 https://nvd.nist.gov https://www.exploit-db.com/exploits/18293/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-5204

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect