CVE-2006-5203: Medium severity invision power services invision power board vulnerability
Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the Admin control panel.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5203?
CVE-2006-5203 is considered a critical vulnerability as it allows remote attackers to execute arbitrary SQL commands and inject malicious web scripts in Invision Power Board.
How do I fix CVE-2006-5203?
To fix CVE-2006-5203, upgrade Invision Power Board to version 2.1.8 or later, which addresses the vulnerability.
What versions of Invision Power Board are affected by CVE-2006-5203?
CVE-2006-5203 affects Invision Power Board versions up to 2.1.7, including several beta and alpha versions.
How can CVE-2006-5203 be exploited?
CVE-2006-5203 can be exploited by crafting a forum description containing a malicious image with embedded PHP code, which is executed when admins visit the "Manage Forums" link.
What are the potential impacts of CVE-2006-5203?
The potential impacts of CVE-2006-5203 include unauthorized access to databases, modification or deletion of data, and possible control over the vulnerable Invision Power Board instance.