PT-2006-4418 · Invision · Invision Power Board
Crazy Cracker
·
Publicado
2006-07-13
·
Atualizado
2024-08-07
·
CVE-2006-3543
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Invision Power Board versions 1.x through 2.x
Description
Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via various parameters in different actions in index.php and coins list.php. The vulnerable parameters include
idcat, code, id, CODE, and member id in actions such as ketqua, Attach, ref, Profile, Login, Help, and coins list. The developer has disputed this issue, stating that the CODE attribute is never present in an SQL query and the 'ketqua' action and file 'coin list.php' are not standard IPB 2.x features. It is unknown whether these vectors are associated with an independent module or modification of IPB.Recommendations
For Invision Power Board versions 1.x through 2.x, as a temporary workaround, consider disabling the vulnerable actions and parameters, such as
ketqua, Attach, ref, Profile, Login, Help, and coins list, until a patch is available. Restrict access to the vulnerable parameters idcat, code, id, CODE, and member id to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Invision Power Board