CVE-2005-1598

EPSS 13.9%

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/43824unverified cve_referencewww.exploit-db.com/exploits/1013unverified exploitdbwww.exploit-db.com/exploits/1014unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://forums.invisionpower.com/index.php?showtopic=168016 http://marc.info/?l=bugtraq&m=111539908705851&w=2 http://marc.info/?l=bugtraq&m=111712587206834&w=2 http://secunia.com/advisories/15265 http://securitytracker.com/id?1013907 http://securitytracker.com/id?1014499 https://exchange.xforce.ibmcloud.com/vulnerabilities/20446 https://www.exploit-db.com/exploits/1013 http://www.gulftech.org/?node=research&article_id=00073-05052005 http://www.osvdb.org/16297 http://www.securiteam.com/exploits/5GP0E2KFQQ.html http://www.securityfocus.com/bid/13529