CVE-2006-2204: Undefined Security Weakness

SQL injection vulnerability in the topic deletion functionality postdelete function in funcmod.php for Invision Power Board 2.1.5 allows remote authenticated moderators to execute arbitrary SQL commands via the selectedpids parameter, which bypasses an integer value check when the $id variable is...

invision215.txt

Invision Power Board v2.1.5 Remote SQL Injection Filename :- funcmod.php Functionname :- postdelete Lines :- 89 To 209 Bug Found By :- Devil-00 Greetz :- Rock Master ^ Hackers Pal ^ n0m4rcy ^ www.securtygurus.net Code if isarray $id if count$id 0 $pid = " IN".implode",",$id.""; else return FALSE;...

Invision Power Board v2.1.5 Remote SQL Injection

Invision Power Board v2.1.5 Remote SQL Injection Filename :- funcmod.php Functionname :- postdelete Lines :- 89 To 209 Bug Found By :- Devil-00 Greetz :- Rock Master ^ Hackers Pal ^ n0m4rcy ^ www.securtygurus.net Code if isarray $id if count$id 0 $pid = " IN".implode",",$id.""; else return FALSE;...