Security Advisory

CVE-2006-6369

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-12-07 17:00:00
Last updated 2024-08-07 20:26:46
Assigner mitre
State PUBLISHED

Description

SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality.