Unrated severityNVD Advisory· Published Mar 19, 2006· Updated Apr 16, 2026
CVE-2006-1267
CVE-2006-1267
Description
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request.
Affected products
1- cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/archive/1/427847/100/0/threadednvdExploitVendor Advisory
- www.securityfocus.com/archive/1/427751/100/0/threadednvd
News mentions
0No linked articles in our index yet.