CVE-2006-4709

Vikingboard 0.1b - SQL Injection via Topic s Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4709. PoCs published by Hessam-x.

AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in Viking board version 0.1b, where user-supplied input in the 's' parameter of topic.php is not properly sanitized. The example URL demonstrates how an attacker could inject malicious SQL queries.

Description

SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands via the s parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Hessam-x · textwebappsphp
https://www.exploit-db.com/exploits/28499

The provided text describes an SQL injection vulnerability in Viking board version 0.1b, where user-supplied input in the 's' parameter of topic.php is not properly sanitized. The example URL demonstrates how an attacker could inject malicious SQL queries.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: Viking board 0.1b
No auth needed
Prerequisites: Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/445719/100/0/threaded
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19919
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1539

Scores

EPSS 0.0101
EPSS Percentile 58.7%

Details

Status published
Products (1)
vikingboard/vikingboard 0.1b
Published Sep 12, 2006
Tracked Since Feb 18, 2026