CVE-2006-3543

Multiple SQL injection vulnerabilities affect Invision Power Board (IPB) 1.x–2.x. The issues enable remote attackers to inject SQL through parameters in index.php and coins_list.php, including: idcat, code, id, CODE, ketqua action, and member_id in various actions (ketqua, Attach, ref, Profile, L...