PT-2006-4418 · Invision · Invision Power Board

Crazy Cracker · Published 2006-07-13 · Updated 2024-08-07 · CVE-2006-3543

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Invision Power Board versions 1.x through 2.x

Description Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via various parameters in different actions in index.php and coins list.php. The vulnerable parameters include idcat, code, id, CODE, and member id in actions such as ketqua, Attach, ref, Profile, Login, Help, and coins list. The developer has disputed this issue, stating that the CODE attribute is never present in an SQL query and the 'ketqua' action and file 'coin list.php' are not standard IPB 2.x features. It is unknown whether these vectors are associated with an independent module or modification of IPB.

Recommendations For Invision Power Board versions 1.x through 2.x, as a temporary workaround, consider disabling the vulnerable actions and parameters, such as ketqua, Attach, ref, Profile, Login, Help, and coins list, until a patch is available. Restrict access to the vulnerable parameters idcat, code, id, CODE, and member id to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-3543

Affected Products

Invision Power Board

References · 9

• 🔥 http://securityfocus.com/bid/18836 · Exploit
• 🔥 https://exploit-db.com/exploits/28167 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3543 · Security Note
• https://t.me/cvenotify/89792 · Telegram Post
• http://securityfocus.com/archive/1/439602/100/0/threaded · Note
• http://securityreason.com/securityalert/1231 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3543 · Note
• http://securityfocus.com/archive/1/439145/100/0/threaded · Note
• http://osvdb.org/30084 · Note