VulnerabilityModified
CVE-2006-2251
SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.
MEDIUM 6.4EPSS 1.37%
Does this matter?
Lower severity and a low EPSS score (1.37%). Track it; it rarely justifies an emergency change on its own.
Description
SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 1.37% probability · 70th percentile
- CISA KEV
- Not listed
- Affected
- invision power services/invision community blog
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2006-05/0142.htmlPatch
- http://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpostPatch
- http://secunia.com/advisories/19973Patch, Vendor Advisory
- http://www.osvdb.org/25252
- http://www.securityfocus.com/archive/1/433076Patch
- http://www.securityfocus.com/bid/17851Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26290
- http://archives.neohapsis.com/archives/bugtraq/2006-05/0142.htmlPatch
- http://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpostPatch
- http://secunia.com/advisories/19973Patch, Vendor Advisory
- http://www.osvdb.org/25252
- http://www.securityfocus.com/archive/1/433076Patch
- http://www.securityfocus.com/bid/17851Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26290
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.