CVE-2006-3544: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Invision Power Board IPB 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a 1 Stats, 2 Mail, and 3 Reg action in index.php. NOTE: the developer has disputed this issue, stating that "At no point does the CODE...

PT-2006-4419 · Invision · Invision Power Board

Name of the Vulnerable Software and Affected Versions: Invision Power Board version 1.3 Final Description: The issue concerns SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands. This is allegedly possible via the CODE parameter in certain actions in...

PT-2006-4418 · Invision · Invision Power Board

Name of the Vulnerable Software and Affected Versions: Invision Power Board versions 1.x through 2.x Description: Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via various parameters in different actions in index.php and coins list.php. The...

CVE-2006-3543

Multiple SQL injection vulnerabilities affect Invision Power Board (IPB) 1.x–2.x. The issues enable remote attackers to inject SQL through parameters in index.php and coins_list.php, including: idcat, code, id, CODE, ketqua action, and member_id in various actions (ketqua, Attach, ref, Profile, L...

Invision Power Board "v1.X & 2.X" SQL Injection

================================ Discovered By: CrAzY CrAcKeR ================================ Example:- /index.php?act=ketqua&code=showcat&idcat=SQL /index.php?act=Attach&type=post&id=SQL /index.php?act=Profile&CODE=SQL /index.php?act=ketqua&code=SQL /coinslist.php?memberid=SQL...

Invision Power Board (IP.Board) 1.x/2.x - Multiple SQL Injections

source: https://www.securityfocus.com/bid/18836/info Invision Power Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. A successful exploit could allow an attacker ...

Invision Power Board (IP.Board) 1.x2.x - Multiple SQL Injections

Invision Power Board IP.Board 1.x2.x - Multiple SQL Injections source: https://www.securityfocus.com/bid/18836/info Invision Power Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it...

Invision Power Board v1.3 Final SQL Injection

By:- Breeeeh [email protected] --------------------- example:- /index.php?act=Stats&CODE=SQL Injection /index.php?act=Mail&CODE=SQL Injection /index.php?act=Reg&CODE=SQL Injection...

[SA20930] Invision Power Board Cross-Site Scripting and Security Bypass

---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...

CVE-2006-3255

SQL injection vulnerability in showmods.php in Woltlab Burning Board WBB 1.2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter...

CVE-2006-3254

SQL injection vulnerability in newthread.php in Woltlab Burning Board WBB 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter...

CVE-2006-3256

SQL injection vulnerability in report.php in Woltlab Burning Board WBB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter...

CVE-2006-3254

SQL injection vulnerability in newthread.php in Woltlab Burning Board WBB 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter...

CVE-2006-3256

SQL injection vulnerability in report.php in Woltlab Burning Board WBB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter...

CVE-2006-3255

CVE-2006-3255 affects Woltlab Burning Board (WBB) 1.2. The vulnerability is a SQL injection in showmods.php via the boardid parameter, enabling remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the available documents. Affected component is showmods.php;...

CVE-2006-3255

SQL injection vulnerability in showmods.php in Woltlab Burning Board WBB 1.2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter...

CVE-2006-3256

SQL injection vulnerability in report.php of Woltlab Burning Board (WBB ) 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter. Root cause: likely improper input handling in the postid field. Exploitation details are not provided in the connected documents. No ...

CVE-2006-3254

Woltlab Burning Board (WBB) 2.0 RC2 contains a SQL injection in newthread.php that allows remote attackers to execute arbitrary SQL commands via the boardid parameter. The vulnerability is described in CVE-2006-3254; original sources confirm the affected component and impact, but do not provide a...

CVE-2006-3255: Undefined Security Weakness

SQL injection vulnerability in showmods.php in Woltlab Burning Board WBB 1.2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter...

CVE-2006-3256: Undefined Security Weakness

SQL injection vulnerability in report.php in Woltlab Burning Board WBB 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter...