CVE-2006-2061
Published Apr 26, 2006
Last updated 6 years ago
Overview
- Description
- SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Evaluator
- Comment
- -
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FABB6806-5DC0-4146-89FC-05D079F0CFEB"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C77C15A2-9A9D-4C3F-8A62-18C54941B79C"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2C79F9F-FE3C-4CC6-88A9-6EFB27724CA9"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F427913-7FEB-49CA-AD9F-5E5EC77CA9ED"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "993BCE2D-C03F-4F2F-A973-68CEC6B34EA5"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.0_alpha_3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B8C2DB4-06C3-4400-B0F3-2025FD829788"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.0_pdr3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "053B554A-AC3D-496F-9E3D-D357D14B87E7"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.0_pf1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61B7742A-2BD1-4119-8850-5BCB35E9F7C5"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.0_pf2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC4CBB17-B8EB-4A60-B8F5-34A2816373FD"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05FA7E1F-D9D2-419F-A9DE-7BE4253F897E"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09F88FD5-0335-4404-AD20-63737A76B051"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_board:2.1_alpha2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4B47FAD-8DCA-4B31-A5CF-884286F49E05"
},
{
"criteria": "cpe:2.3:a:invision_power_services:invision_power_board:2.1.5_2006-03-08:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED5116FA-C532-42DF-ABBD-193AD7B799A6"
}
],
"operator": "OR"
}
]
}
]