NetSight
IP …
high7.5Public exploit code

CVE-2005-1598

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie pass…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.

Affected products

VendorProductAffected versions
Invision Power ServicesInvision Board
Versions 1.0, 1.0.1, 1.1.1, 1.1.2, 1.2, 1.3
Invision Power ServicesInvision Power Board
Version 2.0.3

References