header-logo
Suggest Exploit
vendor:
Invision Power Board
by:
N/A
7.5
CVSS
HIGH
Local PHP File Inclusion and SQL Injection
N/A
CWE
Product Name: Invision Power Board
Affected Version From: 3.0.4
Affected Version To: 2.3.2006
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
N/A

Invision Power Board <= 3.0.4 Local PHP File Inclusion and SQL Injection and Invision Power Board <= 2.3.6 SQL Injection

Invision Power Board (IPB) is a professional forum system that has been built from the ground up with speed and security in mind, taking advantage of object oriented code, highly-optimized SQL queries, and the fast PHP engine. A comprehensive administration control panel is included to help you keep your board running smoothly. Moderators will also enjoy the full range of options available to them via built-in tools and moderators control panel. Members will appreciate the ability to subscribe to topics, send private messages, and perform a host of other options through the user control panel. For a good understanding of the vulnerabilities it is necessary to be familiar with the way IPB handles input data. Below is a quick trace of input validation process. The code snippets come from IPB version 3.0.4. The init() function cleans the input data passed via methods like GET, POST or others at the start of each request to the forum before any of the input variables are processed. Let's look into sanitization performed by cleanGlobals function.

Mitigation:

N/A
Source

Exploit-DB raw data: