CVE

Id
12804  
CVE No.
CVE-2005-1598  
Status
Candidate  
Description
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.  
Phase
Assigned (20050516)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
92235 12804 CVE-2005-1598 BUGTRAQ:20050506 Multiple Vulnerabilities In Invision Power Board  View
92236 12804 CVE-2005-1598 URL:http://marc.info/?l=bugtraq&m=111539908705851&w=2  View
92237 12804 CVE-2005-1598 MISC:http://www.gulftech.org/?node=research&article_id=00073-05052005  View
92238 12804 CVE-2005-1598 BUGTRAQ:20050526 Invision Power Board 1.* and 2.* Exploit (BID 13529)  View
92239 12804 CVE-2005-1598 URL:http://marc.info/?l=bugtraq&m=111712587206834&w=2  View
92240 12804 CVE-2005-1598 MILW0RM:1013  View
92241 12804 CVE-2005-1598 URL:http://milw0rm.com/exploits/1013  View
92242 12804 CVE-2005-1598 MISC:http://www.securiteam.com/exploits/5GP0E2KFQQ.html  View
92243 12804 CVE-2005-1598 CONFIRM:http://forums.invisionpower.com/index.php?showtopic=168016  View
92244 12804 CVE-2005-1598 BID:13529  View
92245 12804 CVE-2005-1598 URL:http://www.securityfocus.com/bid/13529  View
92246 12804 CVE-2005-1598 OSVDB:16297  View
92247 12804 CVE-2005-1598 URL:http://www.osvdb.org/16297  View
92248 12804 CVE-2005-1598 SECTRACK:1013907  View
92249 12804 CVE-2005-1598 URL:http://securitytracker.com/id?1013907  View
92250 12804 CVE-2005-1598 SECTRACK:1014499  View
92251 12804 CVE-2005-1598 URL:http://securitytracker.com/id?1014499  View
92252 12804 CVE-2005-1598 SECUNIA:15265  View
92253 12804 CVE-2005-1598 URL:http://secunia.com/advisories/15265  View
92254 12804 CVE-2005-1598 XF:invision-powerboard-login-sql-injection(20446)  View

Related JVN