CVE-2006-2498: Medium severity invision power services invision power board vulnerability
Published May 20, 2006
·Updated
Invision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving (1) the posticon variable in classes/post/classpost.php and (2) the df value in actionpublic/moderate.php.
Affected Software
19 affected components
Invision Power Services Invision Power Board=2.1_beta2
Invision Power Services Invision Power Board=2.0.4
Invision Power Services Invision Power Board=2.1_rc1
Invision Power Services Invision Power Board=2.1.1
Invision Power Services Invision Power Board=2.1.6
Invision Power Services Invision Power Board=2.1_alpha2
Invision Power Services Invision Power Board=2.1.2
Invision Power Services Invision Power Board=2.1.3
Invision Power Services Invision Power Board=2.1_beta5
Invision Power Services Invision Power Board=2.1.0
Invision Power Services Invision Power Board=2.1.5
Invision Power Services Invision Power Board=2.0.0
Invision Power Services Invision Power Board=2.0.3
Invision Power Services Invision Power Board=2.1_beta4
Invision Power Services Invision Power Board=2.1
Invision Power Services Invision Power Board=2.1_beta3
Invision Power Services Invision Power Board=2.1.4
Invision Power Services Invision Power Board=2.0.2
Invision Power Services Invision Power Board=2.0.1
Remediation
Patch Available
Patch Available
Event History
May 20, 2006
CVE Published
03:02 AM
CVE Published
via MITRE·06:59 AM
Data Sourced
via MITRE·06:59 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2498?
CVE-2006-2498 is classified as a critical vulnerability allowing remote code execution.
2
How do I fix CVE-2006-2498?
To fix CVE-2006-2498, upgrade Invision Power Board to version 2.1.6 or later.
3
Which versions of Invision Power Board are affected by CVE-2006-2498?
CVE-2006-2498 affects Invision Power Board versions 2.0.0 through 2.1.5.
4
Can CVE-2006-2498 allow hackers to control my server?
Yes, CVE-2006-2498 can potentially allow attackers to execute arbitrary PHP scripts, giving them control over the server.
5
What are the potential impacts of CVE-2006-2498?
The potential impacts of CVE-2006-2498 include data theft, site defacement, and unauthorized access to server resources.