CVE Vulnerabilities

CVE-2006-3543

Published: Jul 13, 2006 | Modified: Nov 07, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the (1) idcat and (2) code parameters in a ketqua action in index.php; the id parameter in a (3) Attach and (4) ref action in index.php; the CODE parameter in a (5) Profile, (6) Login, and (7) Help action in index.php; and the (8) member_id parameter in coins_list.php. NOTE: the developer has disputed this issue, stating that the CODE attribute is never present in an SQL query and the ketqua [action] and file coin_list.php are not standard IPB 2.x features. It is unknown whether these vectors are associated with an independent module or modification of IPB

Affected Software

Name Vendor Start Version End Version
Invision_power_board Invision_power_services 2.0_pf1 2.0_pf1
Invision_power_board Invision_power_services 1.0 1.0
Invision_power_board Invision_power_services 1.1.2 1.1.2
Invision_power_board Invision_power_services 2.0.4 2.0.4
Invision_power_board Invision_power_services 2.1.6 2.1.6
Invision_power_board Invision_power_services 2.1_alpha2 2.1_alpha2
Invision_power_board Invision_power_services 2.0_alpha3 2.0_alpha3
Invision_power_board Invision_power_services 1.1.1 1.1.1
Invision_power_board Invision_power_services 1.0.3 1.0.3
Invision_power_board Invision_power_services 2.0_pdr3 2.0_pdr3
Invision_power_board Invision_power_services 2.0 2.0
Invision_power_board Invision_power_services 1.3_final 1.3_final
Invision_power_board Invision_power_services 1.2 1.2
Invision_power_board Invision_power_services 2.1.5 2.1.5
Invision_power_board Invision_power_services 1.0.1 1.0.1
Invision_power_board Invision_power_services 2.0.3 2.0.3
Invision_power_board Invision_power_services 2.1 2.1
Invision_power_board Invision_power_services 2.1.4 2.1.4
Invision_power_board Invision_power_services 1.3.1_final 1.3.1_final
Invision_power_board Invision_power_services 2.0_pf2 2.0_pf2
Invision_power_board Invision_power_services 2.0.2 2.0.2
Invision_power_board Invision_power_services 2.0.1 2.0.1
Invision_power_board Invision_power_services 1.3 1.3

References