Invision Board 1.1.1 functions.php SQL Injection Vulnerability

ID EDB-ID:22461
Type exploitdb
Reporter Gossi The Dog
Modified 2003-04-05T00:00:00


Invision Board 1.1.1 functions.php SQL Injection Vulnerability. Webapps exploit for php platform


An input validation error has been reported in Invision Board which may result in the manipulation of SQL queries. This vulnerability exists in the functions.php script file.

An attacker may be able to exploit this vulnerability by manipulating some URI parameter to include malicious SQL commands and queries which may result in information disclosure, or database corruption.*%2C+t.template%2C+c.password+FROM+ibf_skins+s+LEFT+JOIN+ibf_templates+t+ON+%28t.tmid%3Ds.tmpl_id%