vendor:
Invision Board
by:
SecurityFocus
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Invision Board
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
An input validation error has been reported in Invision Board which may result in the manipulation of SQL queries
An input validation error has been reported in Invision Board which may result in the manipulation of SQL queries. An attacker may be able to exploit this vulnerability by manipulating some URI parameter to include malicious SQL commands and queries which may result in information disclosure, or database corruption.
Mitigation:
Input validation should be used to prevent malicious SQL commands from being executed.
