Lucene search

[email protected]CVE-2006-5203

HistoryOct 10, 2006 - 4:06 a.m.

CVE-2006-5203

2006-10-1004:06:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

invision power board

ipb

security vulnerability

sql injection

remote code execution

cve-2006-5203

8.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

58.0%

JSON

Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the “Manage Forums” link in the Admin control panel.

CPENameOperatorVersion
invision_power_services:invision_power_boardinvision power services invision power boardeq2.0_pf1
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1_beta2
invision_power_services:invision_power_boardinvision power services invision power boardeq1.0
invision_power_services:invision_power_boardinvision power services invision power boardeq1.1.2
invision_power_services:invision_power_boardinvision power services invision power boardeq2.0.4
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1_rc1
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1.1
invision_power_services:invision_power_boardinvision power services invision power boardle2.1.7
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1.6
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1_alpha2

CPE	Name	Operator	Version
invision_power_services:invision_power_board	invision power services invision power board	eq	2.0_pf1
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1_beta2
invision_power_services:invision_power_board	invision power services invision power board	eq	1.0
invision_power_services:invision_power_board	invision power services invision power board	eq	1.1.2
invision_power_services:invision_power_board	invision power services invision power board	eq	2.0.4
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1_rc1
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1.1
invision_power_services:invision_power_board	invision power services invision power board	le	2.1.7
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1.6
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1_alpha2

Rows per page:

1-10 of 361

References

www.securityfocus.com/archive/1/447710/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/29352

8.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

58.0%

JSON