CVE-2006-2061: SQL Injection
SQL injection vulnerability in lib/functaskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2061?
The severity of CVE-2006-2061 is considered high due to the potential for remote SQL command execution.
How do I fix CVE-2006-2061?
To fix CVE-2006-2061, update to a patched version of Invision Power Board released after April 25, 2006.
What versions of Invision Power Board are affected by CVE-2006-2061?
CVE-2006-2061 affects Invision Power Board versions 2.0.x and 2.1.x prior to April 25, 2006.
What is the main issue caused by CVE-2006-2061?
The main issue caused by CVE-2006-2061 is the ability for attackers to execute arbitrary SQL commands via a vulnerability in a specific script.
Can CVE-2006-2061 be exploited remotely?
Yes, CVE-2006-2061 can be exploited remotely by attackers targeting the vulnerable parameters.