CVE

Id
17392  
CVE No.
CVE-2006-1288  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to (1) arrays of id/stamp pairs and (2) the keys in arrays of key/value pairs in ipsclass.php; (3) the topics variable in usercp.php; and the topicsread cookie in (4) topics.php, (5) search.php, and (6) forums.php.  
Phase
Assigned (20060319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
143759 17392 CVE-2006-1288 CONFIRM:http://forums.invisionpower.com/index.php?showtopic=204627  View
143760 17392 CVE-2006-1288 CONFIRM:http://forums.invisionpower.com/index.php?act=Attach&type=post&id=9642  View
143761 17392 CVE-2006-1288 VUPEN:ADV-2006-0861  View
143762 17392 CVE-2006-1288 URL:http://www.vupen.com/english/advisories/2006/0861  View
143763 17392 CVE-2006-1288 SECUNIA:19141  View
143764 17392 CVE-2006-1288 URL:http://secunia.com/advisories/19141  View
143765 17392 CVE-2006-1288 XF:invision-multiple-sql-injection(25100)  View

Related JVN