Back
CVE-2006-1076
SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter.
Published: Mar 9, 2006
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| invision_power_services | invision_power_board | 2.1.5 |
GitHub Security Advisory GHSA-mjhv-pgq3-2737
SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision...
References (8)
- http://www.securityfocus.com/archive/1/426875/100/0/threaded
- http://www.securityfocus.com/archive/1/430357/100/0/threaded
- http://www.securityfocus.com/bid/16971 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25254
- http://www.securityfocus.com/archive/1/426875/100/0/threaded
- http://www.securityfocus.com/archive/1/430357/100/0/threaded
- http://www.securityfocus.com/bid/16971 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25254
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
1.09%
Top 37% most likely to be exploited
Threat Score
30.3 / 100
Data Sources
NVD
EPSS
GitHub