CVE-2006-1076

Description

SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter.

Affected products

• invision_power_services / invision_power_board2.1.5 – 2.1.5

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/25254
• MISChttp://www.securityfocus.com/archive/1/426875/100/0/threaded
• MISChttp://www.securityfocus.com/bid/16971
• MISChttp://www.securityfocus.com/archive/1/430357/100/0/threaded