CVE-2006-3544

Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter…

published July 13, 2006

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a (1) Stats, (2) Mail, and (3) Reg action in index.php. NOTE: the developer has disputed this issue, stating that "At no point does the CODE parameter touch the database. The CODE parameter is used in a SWITCH statement to determine which function to run.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01373 · 71.6th percentile
Published
2006-07-13T00:00Z
EPSS history
Timeline
  • 13 JUL 00:00Z
    Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter…
    cvelistv5