<<< Date Index >>> <<< Thread Index >>>

Re: Re: Invision Power Board 2.1 <= 2.1.6 sql injection

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Re: Invision Power Board 2.1 <= 2.1.6 sql injection
From: paul14075@xxxxxxxxx
Date: 18 Jul 2006 18:10:58 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

I can confirm that this exploit:

http://www.milw0rm.com/exploits/2010

works against *MOST* IPB v2.1.6 installs.

Prev by Date: Escalation of privileges in Outpost and Lavasoft Firewalls -Unusual ShellExecute behavior
Next by Date: Re: LAMP vs Microsoft
Previous by thread: Re: Invision Power Board 2.1 <= 2.1.6 sql injection
Next by thread: MyBulletinBoard (MyBB) 1.1.5 'CLIENT-IP' sql injection
Index(es):
- Date
- Thread