CVE-2008-4171

Description

SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter.

References

http://www.vupen.com/english/advisories/2008/2487

http://www.securitytracker.com/id?1020817

http://www.securityfocus.com/bid/31288

http://forums.invisionpower.com/index.php?showtopic=276512

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3