Lucene search
K

invisionSQL.txt

🗓️ 11 Jan 2005 00:00:00Reported by darkhawk matrixType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 20 Views

Vulnerability in Invision Community Blog allows SQL injection through improper validation checks.

Code
`  
  
Invision Community Blog <http://www.invisionblog.com/>, is a powerful blogging system that will plug straight into your Invision Power Board. Allow your members to create their own individual blogs.   
Invision Community Blog is a comprehensive system with a very easy to use interface.  
  
Due to improper validation checks in the variable eid , it is possible for an attacker to manipulate an SQL query.  
  
Example:  
  
http://website/forum/index.php?automodule=blog&blogid=14&cmd=showentry&eid=4%20injectionhere  
  
  
Website MATRIX 2K WebMasters & Hackers Association  
http://www.matrix2k.org  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation