CVE

Id
18165  
CVE No.
CVE-2006-2061  
Status
Candidate  
Description
SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters.  
Phase
Assigned (20060426)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
156444 18165 CVE-2006-2061 BUGTRAQ:20060425 Invision Vulnerabilities, including remote code execution  View
156445 18165 CVE-2006-2061 URL:http://www.securityfocus.com/archive/1/archive/1/431990/100/0/threaded  View
156446 18165 CVE-2006-2061 BUGTRAQ:20060427 Re: Invision Vulnerabilities, including remote code execution  View
156447 18165 CVE-2006-2061 URL:http://www.securityfocus.com/archive/1/archive/1/432226/100/0/threaded  View
156448 18165 CVE-2006-2061 CONFIRM:http://forums.invisionpower.com/index.php?showtopic=213374  View
156449 18165 CVE-2006-2061 BID:17690  View
156450 18165 CVE-2006-2061 URL:http://www.securityfocus.com/bid/17690  View
156451 18165 CVE-2006-2061 VUPEN:ADV-2006-1534  View
156452 18165 CVE-2006-2061 URL:http://www.vupen.com/english/advisories/2006/1534  View
156453 18165 CVE-2006-2061 SECUNIA:19830  View
156454 18165 CVE-2006-2061 URL:http://secunia.com/advisories/19830  View
156455 18165 CVE-2006-2061 SREASON:796  View
156456 18165 CVE-2006-2061 URL:http://securityreason.com/securityalert/796  View
156457 18165 CVE-2006-2061 XF:invision-index-ck-sql-injection(26071)  View

Related JVN