7.5

CVE-2006-1288

EPSS 0.65%
Published 19.03.2006 23:02:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to (1) arrays of id/stamp pairs and (2) the keys in arrays of key/value pairs in ipsclass.php; (3) the topics variable in usercp.php; and the topicsread cookie in (4) topics.php, (5) search.php, and (6) forums.php.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Invision Power Services ≫ Invision Power Board Version2.0.4

Invision Power Services ≫ Invision Power Board Version2.1.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.65%	0.702

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/19141

http://www.vupen.com/english/advisories/2006/0861

http://forums.invisionpower.com/index.php?act=Attach&type=post&id=9642

Patch

http://forums.invisionpower.com/index.php?showtopic=204627

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/25100

https://nvd.nist.gov/vuln/detail/CVE-2006-1288

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1288

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1288

EUVD