CVE-2006-7071

CVE-2006-7071 is an SQL injection vulnerability affecting Invision Power Board (IPB) versions 2.1 up to 2.1.6. The flaw resides in the code path for Class_session.php (CLIENT_IP parameter) where user-supplied input is used in database queries, enabling remote attackers to execute arbitrary SQL co...