2 matches found
Sql injection
SQL injection vulnerability in army.php in supersmashbrothers SSB Army System 2.1.0 for Invision Power Board IPB allows remote attackers to execute arbitrary SQL commands via the userstat parameter in an army action to index.php...
CVE-2006-0750
CVE-2006-0750 describes a SQL injection vulnerability in army.php of the Supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB). The issue arises from the userstat parameter used in an army action to index.php, enabling remote attackers to execute arbitrary SQL commands (root c...