CERTA-2006-AVI-206
Vulnerability from certfr_avis - Published: 2006-05-04 - Updated: 2006-05-04None
Description
Une vulnérabilité affectant le forum Invision Power Board a été découverte. Son exploitation permet l'exécution de code arbitraire à distance.
Solution
Passer en version 2.1.6 courante ou appliquer le correctif pour la version 2.1.6 indiqué dans le message posté sur le forum d'Invision Power (cf. section Documentation).
Invision Power Board versions antérieures à 2.1.6. La version 2.1.6 est vulnérable si elle est antérieure au 17 mai 2006.
| Vendor | Product | Description |
|---|
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eInvision Power Board\u003c/SPAN\u003e versions ant\u00e9rieures \u00e0 2.1.6. La version 2.1.6 est vuln\u00e9rable si elle est ant\u00e9rieure au 17 mai 2006.\u003c/P\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 affectant le forum Invision Power Board a \u00e9t\u00e9\nd\u00e9couverte. Son exploitation permet l\u0027ex\u00e9cution de code arbitraire \u00e0\ndistance.\n\n## Solution\n\nPasser en version 2.1.6 courante ou appliquer le correctif pour la\nversion 2.1.6 indiqu\u00e9 dans le message post\u00e9 sur le forum d\u0027Invision\nPower (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2006-2204",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-2204"
}
],
"initial_release_date": "2006-05-04T00:00:00",
"last_revision_date": "2006-05-04T00:00:00",
"links": [
{
"title": "Message du 17 mai 2006 post\u00e9 sur le forum d\u0027Invision Power :",
"url": "http://forums.invisionpower.com/index.php?showtopic=215527"
}
],
"reference": "CERTA-2006-AVI-206",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2006-05-04T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": null,
"title": "Vuln\u00e9rabilit\u00e9 dans Invision Power Board",
"vendor_advisories": [
{
"published_at": null,
"title": "Message du 17 mai 2006 sur le forum d\u0027Invision Power",
"url": null
}
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.