SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Invision_board | Invision_power_services | 1.0 (including) | 1.0 (including) |
| Invision_board | Invision_power_services | 1.0.1 (including) | 1.0.1 (including) |
| Invision_board | Invision_power_services | 1.1.1 (including) | 1.1.1 (including) |
| Invision_board | Invision_power_services | 1.1.2 (including) | 1.1.2 (including) |
| Invision_board | Invision_power_services | 1.2 (including) | 1.2 (including) |
| Invision_board | Invision_power_services | 1.3 (including) | 1.3 (including) |
| Invision_board | Invision_power_services | 1.3.1_final (including) | 1.3.1_final (including) |
| Invision_board | Invision_power_services | 1.3_final (including) | 1.3_final (including) |
References
- http://www.securityfocus.com/archive/1/395515
- http://www.securityfocus.com/bid/13097
- http://www.securitytracker.com/alerts/2005/Apr/1013676.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20059
- http://www.securityfocus.com/archive/1/395515
- http://www.securityfocus.com/bid/13097
- http://www.securitytracker.com/alerts/2005/Apr/1013676.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20059