CVE-2006-5203
Severity Score
5.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the Admin control panel.
Invision Power Board (IPB) 2.1.7 y anteriores permite a un administrador remoto restringido inyectar secuencias de comandos web o HTML de su elección, o ejecutar comandos SQL de su elección, a través de una descripción del foro que contenga una imagen artesanal con código PHP, lo cual es esjecutado cuando el usuario visita "Mange Forum" enlazando en el panel de control de Admin.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-10-09 CVE Reserved
- 2006-10-09 CVE Published
- 2024-06-14 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/archive/1/447710/100/0/threaded | Mailing List | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/29352 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | <= 2.1.7 Search vendor "Invision Power Services" for product "Invision Power Board" and version " <= 2.1.7" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 1.0 Search vendor "Invision Power Services" for product "Invision Power Board" and version "1.0" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 1.0.1 Search vendor "Invision Power Services" for product "Invision Power Board" and version "1.0.1" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 1.0.3 Search vendor "Invision Power Services" for product "Invision Power Board" and version "1.0.3" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 1.1.1 Search vendor "Invision Power Services" for product "Invision Power Board" and version "1.1.1" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 1.1.2 Search vendor "Invision Power Services" for product "Invision Power Board" and version "1.1.2" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 1.2 Search vendor "Invision Power Services" for product "Invision Power Board" and version "1.2" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 1.3 Search vendor "Invision Power Services" for product "Invision Power Board" and version "1.3" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 1.3.1_final Search vendor "Invision Power Services" for product "Invision Power Board" and version "1.3.1_final" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 1.3_final Search vendor "Invision Power Services" for product "Invision Power Board" and version "1.3_final" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0.0 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0.0" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0.1 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0.1" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0.2 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0.2" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0.3 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0.3" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0.4 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0.4" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0.x Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0.x" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0_alpha3 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0_alpha3" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0_pdr3 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0_pdr3" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0_pf1 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0_pf1" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.0_pf2 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.0_pf2" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1.0 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1.0" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1.1 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1.1" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1.2 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1.2" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1.3 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1.3" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1.4 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1.4" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1.5 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1.5" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1.5_2006-03-08 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1.5_2006-03-08" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1.6 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1.6" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1_alpha2 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1_alpha2" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1_beta2 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1_beta2" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1_beta3 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1_beta3" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1_beta4 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1_beta4" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1_beta5 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1_beta5" | - |
Affected
| ||||||
| Invision Power Services Search vendor "Invision Power Services" | Invision Power Board Search vendor "Invision Power Services" for product "Invision Power Board" | 2.1_rc1 Search vendor "Invision Power Services" for product "Invision Power Board" and version "2.1_rc1" | - |
Affected
| ||||||