CVE-2006-2061: SQL Injection
First published: Wed Apr 26 2006(Updated: )
SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Invision Power Services Invision Board | =2.1 | |
| Invision Power Services Invision Board | =2.0_pdr3 | |
| Invision Power Services Invision Board | =2.0.3 | |
| Invision Power Services Invision Power Board | =2.1.5_2006-03-08 | |
| Invision Power Services Invision Board | =2.0.1 | |
| Invision Power Services Invision Board | =2.0_pf2 | |
| Invision Power Services Invision Board | =2.0.2 | |
| Invision Power Services Invision Board | =2.1_alpha2 | |
| Invision Power Services Invision Board | =2.0_alpha_3 | |
| Invision Power Services Invision Board | =2.1.5 | |
| Invision Power Services Invision Board | =2.0 | |
| Invision Power Services Invision Board | =2.0.4 | |
| Invision Power Services Invision Board | =2.0_pf1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://forums.invisionpower.com/index.php?showtopic=213374
- http://www.securityfocus.com/bid/17690
- http://secunia.com/advisories/19830
- http://securityreason.com/securityalert/796
- http://www.vupen.com/english/advisories/2006/1534
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26071
- http://www.securityfocus.com/archive/1/432226/100/0/threaded
- http://www.securityfocus.com/archive/1/431990/100/0/threaded
- collector/nvd-historical
- vendor/invision power services
- product/invision board
- canonical/invision power services invision board
- product/invision power board
- canonical/invision power services invision power board
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- version/invision power services invision board/2.1
- version/invision power services invision board/2.0_pdr3
- version/invision power services invision board/2.0.3
- version/invision power services invision power board/2.1.5_2006-03-08
- version/invision power services invision board/2.0.1
- version/invision power services invision board/2.0_pf2
- version/invision power services invision board/2.0.2
- version/invision power services invision board/2.1_alpha2
- version/invision power services invision board/2.0_alpha_3
- version/invision power services invision board/2.1.5
- version/invision power services invision board/2.0
- version/invision power services invision board/2.0.4
- version/invision power services invision board/2.0_pf1