CVE-2006-6369

概要

参考情報

• forums.invisionpower.com/index.php · Patch
• securityfocus.com/archive/1/453126/100/100/threaded
• securityfocus.com/archive/1/453159/100/100/threaded
• vupen.com/english/advisories/2006/4820

invision community blog のその他の脆弱性

• CVE-2006-2251中 6.4SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attack…
• CVE-2005-1946高 7.5Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the …
• CVE-2005-1945中 4.3Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers …
• CVE-2005-0217高 7.5SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid pa…