CVE-2006-6369 - SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality

Back Back to CVE browser

HIGH

SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality

Published Dec 7, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.08%

Description

SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://forums.invisionpower.com/index.php?showtopic=230108
x_refsource_CONFIRMPatch
http://www.securityfocus.com/archive/1/453126/100/100/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/453159/100/100/threaded
mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2006/4820
vdb-entryx_refsource_VUPEN

Link	Providers	Tags
http://forums.invisionpower.com/index.php?showtopic=230108		x_refsource_CONFIRMPatch
http://www.securityfocus.com/archive/1/453126/100/100/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/453159/100/100/threaded		mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2006/4820		vdb-entryx_refsource_VUPEN

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 7, 2006

Updated Aug 7, 2024

Reserved Dec 7, 2006

Link CVE-2006-6369

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-6369

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-6369