SQL injection vulnerability in the topic deletion functionality (post_delete function in func_mod.php) for Invision Power Board 2.1.5 allows remote authenticated moderators to execute arbitrary SQL commands via the selectedpids parameter, which bypasses an integer value check when the $id variable is an array.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-05-05T10:00:00

Updated: 2024-08-07T17:43:28.065Z

Reserved: 2006-05-04T00:00:00

Link: CVE-2006-2204

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2006-05-05T12:46:00.000

Modified: 2024-11-21T00:10:47.307

Link: CVE-2006-2204

cve-icon Redhat

No data.