SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via the (1) st or (2) keywords parameter.
| Software | From | Fixed in |
|---|---|---|
| ikonboard.com / ikonboard | 3.1.3 | 3.1.3.x |
| ikonboard.com / ikonboard | 3.0.1 | 3.0.1.x |
| ikonboard.com / ikonboard | 3.1.2a | 3.1.2a.x |
| ikonboard.com / ikonboard | 3.1.1 | 3.1.1.x |