Description
SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter.
References
- http://forums.invisionpower.com/index.php?showtopic=276512
- ADV-2008-2487 vdb-entry
- 31288 vdb-entry
- 1020817 vdb-entry