CVE

Id
19648  
CVE No.
CVE-2006-3544  
Status
Candidate  
Description
** DISPUTED ** Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a (1) Stats, (2) Mail, and (3) Reg action in index.php. NOTE: the developer has disputed this issue, stating that "At no point does the CODE parameter touch the database. The CODE parameter is used in a SWITCH statement to determine which function to run."  
Phase
Assigned (20060712)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
177702 19648 CVE-2006-3544 BUGTRAQ:20060702 Invision Power Board v1.3 Final SQL Injection  View
177703 19648 CVE-2006-3544 URL:http://www.securityfocus.com/archive/1/archive/1/438961/100/0/threaded  View
177704 19648 CVE-2006-3544 BUGTRAQ:20060710 Re: Invision Power Board v1.3 Final SQL Injection  View
177705 19648 CVE-2006-3544 URL:http://www.securityfocus.com/archive/1/archive/1/439629/100/0/threaded  View
177706 19648 CVE-2006-3544 BID:18782  View
177707 19648 CVE-2006-3544 URL:http://www.securityfocus.com/bid/18782  View
177708 19648 CVE-2006-3544 OSVDB:30084  View
177709 19648 CVE-2006-3544 URL:http://www.osvdb.org/30084  View
177710 19648 CVE-2006-3544 SREASON:1225  View
177711 19648 CVE-2006-3544 URL:http://securityreason.com/securityalert/1225  View
177712 19648 CVE-2006-3544 XF:ipb-index-sql-injection(27555)  View

Related JVN