CVE-2006-0750

CVE-2006-0750 describes a SQL injection vulnerability in army.php of the Supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB). The issue arises from the userstat parameter used in an army action to index.php, enabling remote attackers to execute arbitrary SQL commands (root c...