NVD

Id
62218  
Name
CVE-2006-3544  
Description
** DISPUTED ** Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a (1) Stats, (2) Mail, and (3) Reg action in index.php. NOTE: the developer has disputed this issue, stating that "At no point does the CODE parameter touch the database. The CODE parameter is used in a SWITCH statement to determine which function to run."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-12  
Modified Date
2008-09-05  
Seq
2006-3544  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322339 62218 CVE-2006-3544 1225  View
322340 62218 CVE-2006-3544 20060702 Invision Power Board v1.3 Final SQL Injection  View
322341 62218 CVE-2006-3544 20060710 Re: Invision Power Board v1.3 Final SQL Injection  View
322342 62218 CVE-2006-3544 18782  View
322343 62218 CVE-2006-3544 ipb-index-sql-injection(27555)  View

Related JVN