Invision Board functions.php SQL Injection Vulnerability
BID:7290
Info
Invision Board functions.php SQL Injection Vulnerability
| Bugtraq ID: | 7290 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 05 2003 12:00AM |
| Updated: | Apr 05 2003 12:00AM |
| Credit: | This vulnerability was reported by "Gossi The Dog" <[email protected]>. |
| Vulnerable: |
Invision Power Services Invision Board 1.1.1 |
| Not Vulnerable: | |
Discussion
Invision Board functions.php SQL Injection Vulnerability
An input validation error has been reported in Invision Board which may result in the manipulation of SQL queries. This vulnerability exists in the functions.php script file.
An attacker may be able to exploit this vulnerability by manipulating some URI parameter to include malicious SQL commands and queries which may result in information disclosure, or database corruption.
An input validation error has been reported in Invision Board which may result in the manipulation of SQL queries. This vulnerability exists in the functions.php script file.
An attacker may be able to exploit this vulnerability by manipulating some URI parameter to include malicious SQL commands and queries which may result in information disclosure, or database corruption.
References
Invision Board functions.php SQL Injection Vulnerability
References:
References:
- Invision Board Homepage (Invision Power Services)
- Possible Security Vunerability Fixed (Invision Power Services)
- Two Invision Power Board 1.1.x vulns ("Gossi The Dog"