CVE-2006-2061 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-2061
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-2061

Description: SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/26071 SREASON http://securityreason.com/securityalert/796 SAID Secunia Advisory: SA19830 CONFIRM http://forums.invisionpower.com/index.php?showtopic=213374 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/432226/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/431990/100/0/threaded BID 17690

Return to the previous page.