Vulnerabilities > CVE-2006-1288 - Unspecified vulnerability in Invision Power Services Invision Power Board 2.0.4/2.1.4

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
invision-power-services
NVD
Published: 2006-03-19
Updated: 2024-11-21

Summary

Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to (1) arrays of id/stamp pairs and (2) the keys in arrays of key/value pairs in ipsclass.php; (3) the topics variable in usercp.php; and the topicsread cookie in (4) topics.php, (5) search.php, and (6) forums.php.

Vulnerable Configurations

Part Description Count
Application
Invision_Power_Services
2

References