CVEvulnerability
CVE-2006-0750
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-02-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the userstat parameter in an army action to index.php.
Affected configurations
• supersmashbrothers army system 2.1.0 for ipb
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secubox.shadock.net/Invision_Power_Board_Army_System_Mod_2.1_and_prior_SQL_Injection_Exploit.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18840 Vendor Advisory
- http://www.securityfocus.com/archive/1/424846/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16606 Exploit
- http://www.vupen.com/english/advisories/2006/0561 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24654 exchange.xforce.ibmcloud.com
- http://secubox.shadock.net/Invision_Power_Board_Army_System_Mod_2.1_and_prior_SQL_Injection_Exploit.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18840 Vendor Advisory
- http://www.securityfocus.com/archive/1/424846/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16606 Exploit
- http://www.vupen.com/english/advisories/2006/0561 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24654 exchange.xforce.ibmcloud.com