Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a (1) Stats, (2) Mail, and (3) Reg action in index.php. NOTE: the developer has disputed this issue, stating that "At no point does the CODE parameter touch the database. The CODE parameter is used in a SWITCH statement to determine which function to run.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Invision Power Board 'index.php' act参数远程SQL注入漏洞
Vulnerability Description
Invision Power Board是一个非常流行的PHP论坛程序。 Invision Power Board处理用户请求时存在SQL注入漏洞，远程攻击者可能利用此漏洞非授权操作数据库。 Invision Power Board的index.php脚本文件没有对act参数中的数据做充分地检查过滤，远程攻击者可以输入中插入特定的SQL串对数据库执行恶意操作。
CVSS Information
N/A
Vulnerability Type
N/A