CVE-2006-2251: SQL Injection
SQL injection vulnerability in the dommod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2251?
CVE-2006-2251 is considered a high severity vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2006-2251?
To fix CVE-2006-2251, upgrade to a version of Invision Community Blog that is not affected, such as version 1.2 or later.
What are the affected versions in CVE-2006-2251?
CVE-2006-2251 affects Invision Community Blog versions 1.0, 1.1, 1.1.2 final, and 1.2.
Who is at risk due to CVE-2006-2251?
Remote attackers with moderator privileges can exploit CVE-2006-2251 to perform SQL injection attacks.
What types of attacks can CVE-2006-2251 enable?
CVE-2006-2251 can enable attackers to execute arbitrary SQL commands, potentially compromising the integrity and confidentiality of the database.