Unrated severityNVD Advisory· Published Mar 19, 2006· Updated Jun 16, 2026
CVE-2006-1267
CVE-2006-1267
Description
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request.
Affected products
2cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:invision_power_services:invision_power_board:2.1.4:*:*:*:*:*:*:*
- (no CPE)range: <=2.1.4
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/archive/1/427847/100/0/threadednvdExploitVendor Advisory
- www.securityfocus.com/archive/1/427751/100/0/threadednvd
News mentions
0No linked articles in our index yet.