← Database

CVE-2006-2251

MEDIUM CVSS: 6.4 Published: 2006-05-09 Modified: 2026-06-16

Description

SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.

Affected Platforms

Invision Power Services Invision Community Blog

Weakness Type

NVD-CWE-Other

References