Security Advisory

CVE-2006-5203

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-10-09 19:00:00

Last updated 2024-08-07 19:41:05

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the Admin control panel.

← Browse all CVEs View on cve.org ↗