high7.5
CVE-2008-4171
SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands v…
Impact
SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invision Power Services | Invision Power Board | Versions 2.2, 2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://forums.invisionpower.com/index.php?showtopic=276512
- http://www.securityfocus.com/bid/31288
- http://www.securitytracker.com/id?1020817
- http://www.vupen.com/english/advisories/2008/2487
- http://forums.invisionpower.com/index.php?showtopic=276512
- http://www.securityfocus.com/bid/31288
- http://www.securitytracker.com/id?1020817
- http://www.vupen.com/english/advisories/2008/2487