Vulnerabilities > CVE-2006-1267 - Unspecified vulnerability in Invision Power Services Invision Power Board 2.1.4
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |