Invision PowerBoard SQL Injection Privilege Escalation Vulnerability

Bugtraq ID:	14289
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 16 2005 12:00AM
Updated:	Jul 16 2005 12:00AM
Credit:	Credited to hacky0u from http://www.h4cky0u.org.
Vulnerable:	Invision Power Services Invision Board 2.1 Alpha2 Invision Power Services Invision Board 2.0.4 Invision Power Services Invision Board 2.0.3 Invision Power Services Invision Board 2.0.2 Invision Power Services Invision Board 2.0.1 Invision Power Services Invision Board 2.0 PF2 Invision Power Services Invision Board 2.0 PF1 Invision Power Services Invision Board 2.0 PDR3 Invision Power Services Invision Board 2.0 Alpha 3 Invision Power Services Invision Board 2.0 Invision Power Services Invision Board 1.3.1 Final Invision Power Services Invision Board 1.3 Final Invision Power Services Invision Board 1.3 Invision Power Services Invision Board 1.3
Not Vulnerable:

Invision PowerBoard SQL Injection Privilege Escalation Vulnerability

A vulnerability in Invision PowerBoard has been reported. It is alleged that due to a SQL injection vulnerability, it is possible for attackers to hijack other user accounts. Proof of concept code has been supplied.

Invision PowerBoard SQL Injection Privilege Escalation Vulnerability

A proof of concept script was made available:

• /data/vulnerabilities/exploits/invpb-cookie.pl

Invision PowerBoard SQL Injection Privilege Escalation Vulnerability

Solution:
An unofficial fix has been posted here:

http://www.hackerscenter.com/archive/view.asp?id=3812

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Invision PowerBoard SQL Injection Privilege Escalation Vulnerability

References:

• [HSC Security Group] Invision PowerBoard 1.3.x - 2-x Exploit and Patch ([email protected])