| Package | Affected versions | Patched versions |
|---|---|---|
| invision power board | = 2.0.4= 2.1.4 |
Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to (1) arrays of id/stamp pairs and (2) the keys in arrays of key/value pairs in ipsclass.php; (3) the topics variable in usercp.php; and the topicsread cookie in (4) topics.php, (5) search.php, and (6) forums.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free