CVE-2006-2217

SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a reputation action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Published: May 5, 2006
Updated: Apr 13, 2023
CVE: CVE-2006-2217
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
invision_power_services / invision_power_board	2.0.4	2.0.4.x
invision_power_services / invision_power_board	2.1.6	2.1.6.x
invision_power_services / invision_power_board	2.1_alpha2	2.1_alpha2.x
invision_power_services / invision_power_board	2.1.5	2.1.5.x
invision_power_services / invision_power_board	2.0.0	2.0.0.x
invision_power_services / invision_power_board	2.0.3	2.0.3.x
invision_power_services / invision_power_board	2.1	2.1.x
invision_power_services / invision_power_board	2.1.4	2.1.4.x
invision_power_services / invision_power_board	2.0.2	2.0.2.x
invision_power_services / invision_power_board	2.0.1	2.0.1.x

http://www.securityfocus.com/bid/17839

Vulnerability Database

289,697

CVE-2006-2217