CVE-2006-1288: SQL Injection
Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to (1) arrays of id/stamp pairs and (2) the keys in arrays of key/value pairs in ipsclass.php; (3) the topics variable in usercp.php; and the topicsread cookie in (4) topics.php, (5) search.php, and (6) forums.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1288?
CVE-2006-1288 has a medium severity rating due to its potential for SQL injection attacks.
How do I fix CVE-2006-1288?
To fix CVE-2006-1288, upgrade Invision Power Board to versions 2.0.4 or 2.1.4 released after January 5, 2006.
What are the common vulnerabilities associated with CVE-2006-1288?
CVE-2006-1288 includes multiple SQL injection vulnerabilities that allow for arbitrary SQL command execution.
Who is affected by CVE-2006-1288?
Users of Invision Power Board versions 2.0.4 and 2.1.4 before January 5, 2006 are affected by CVE-2006-1288.
Can CVE-2006-1288 lead to data breaches?
Yes, successful exploitation of CVE-2006-1288 can potentially lead to unauthorized data access and breaches.