CVE-2006-7071 | SynScan

Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2006-7071

SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote attackers to execute arbitrary SQL commands via the CLIENT_IP parameter.

Published: Mar 2, 2007
Updated: Apr 13, 2023
CVE: CVE-2006-7071
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
invision_power_services / invision_power_board	2.1.1	2.1.1.x
invision_power_services / invision_power_board	2.1.6	2.1.6.x
invision_power_services / invision_power_board	2.1.2	2.1.2.x
invision_power_services / invision_power_board	2.1.3	2.1.3.x
invision_power_services / invision_power_board	2.1.5	2.1.5.x
invision_power_services / invision_power_board	2.1.4	2.1.4.x