CVE-2006-2097

SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands via the from_contact field in a private message (PM).

• invision power services invision power board (<= 2.1.4) • invision power services invision power board 1.0 • invision power services invision power board 1.0.1 • invision power services invision power board 1.1.1 • invision power services invision power board 1.1.2 • invision power services invision power board 1.2 • invision power services invision power board 1.3 • invision power services invision power board 1.3.1 final • invision power services invision power board 1.3 final • invision power services invision power board 2.0.0 • invision power services invision power board 2.0.1 • invision power services invision power board 2.0.2 • invision power services invision power board 2.0.3 • invision power services invision power board 2.0.4 • invision power services invision power board 2.0.x • invision power services invision power board 2.1 • invision power services invision power board 2.1.0 • invision power services invision power board 2.1.1 • invision power services invision power board 2.1.2 • invision power services invision power board 2.1.3 • invision power services invision power board 2.1 alpha2 • invision power services invision power board 2.1 beta2 • invision power services invision power board 2.1 beta3 • invision power services invision power board 2.1 beta4 • invision power services invision power board 2.1 beta5 • invision power services invision power board 2.1 rc1