7.5

CVE-2006-1288

EPSS 1.17%
Veröffentlicht 19.03.2006 23:02:00
Zuletzt bearbeitet 16.06.2026 22:22:22
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to (1) arrays of id/stamp pairs and (2) the keys in arrays of key/value pairs in ipsclass.php; (3) the topics variable in usercp.php; and the topicsread cookie in (4) topics.php, (5) search.php, and (6) forums.php.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Invision Power Services ≫ Invision Power Board Version2.0.4

Invision Power Services ≫ Invision Power Board Version2.1.4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.17%	0.632

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/19141

http://www.vupen.com/english/advisories/2006/0861

http://forums.invisionpower.com/index.php?act=Attach&type=post&id=9642

Patch

http://forums.invisionpower.com/index.php?showtopic=204627

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/25100

https://nvd.nist.gov/vuln/detail/CVE-2006-1288

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1288

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1288

EUVD