medium5.1
CVE-2006-1267
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parame…
Impact
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invision Power Services | Invision Power Board | Version 2.1.4 |