CVE-2006-2097: SQL Injection
SQL injection vulnerability in funcmsg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands via the fromcontact field in a private message (PM).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2097?
The severity of CVE-2006-2097 is classified as high due to its potential to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2006-2097?
To fix CVE-2006-2097, upgrade Invision Power Board to the latest version that addresses this vulnerability.
What versions of Invision Power Board are affected by CVE-2006-2097?
CVE-2006-2097 affects Invision Power Board versions up to 2.1.4 and several earlier versions including 1.x and 2.0.x.
Can CVE-2006-2097 lead to data breaches?
Yes, CVE-2006-2097 can lead to data breaches as attackers can execute arbitrary SQL commands, potentially exposing sensitive data.
How can I determine if my site is vulnerable to CVE-2006-2097?
You can determine if your site is vulnerable to CVE-2006-2097 by checking the version of Invision Power Board in use against the affected versions list.