Release Date: 2004-03-01
Critical: Moderately critical
Impact: Security Bypass
Where: From remote
Software: Invision Power Board 1.x
Description:
Knight Commander has reported a vulnerability in Invision Power Board, allowing malicious people to conduct SQL injection attacks.
The problem is that input passed to the "st" parameter in "search.php" isn't properly sanitised before it is used in an SQL query. This can be exploited to manipulate the SQL query by injecting arbitrary SQL code.
The vulnerability has been reported in version 1.3 and prior.
Solution:
Edit the source code to ensure that input is properly sanitised.
Provided and/or discovered by:
Knight Commander
Source: Secunia