CVE-2006-1369

The CVE-2006-1369 issue affects Invision Power Board (IPB) 2.1.5 and earlier, prior to 20060308. The vulnerability is a cross-site scripting (XSS) flaw exploitable through a Private Message (PM) under certain circumstances, enabling remote attackers to inject arbitrary web script or HTML. The roo...

CVE-2006-1076

SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board IPB 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter...

CVE-2006-1076

CVE-2006-1076 affects Invision Power Board (IPB) 2.1.5. The vulnerability is a SQL injection in index.php during a showtopic-like operation, exploitable via the st parameter , allowing remote attackers to execute arbitrary SQL commands. The connected documents do not provide a patch or specific r...