CVE-2006-0750

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the userstat parameter in an army action to index.php.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secubox.shadock.net/Invision_Power_Board_Army_System_Mod_2.1_and_prior_SQL_Injection_Exploit.htmlExploit, Vendor Advisory
http://secunia.com/advisories/18840Vendor Advisory
http://www.securityfocus.com/archive/1/424846/100/0/threaded
http://www.securityfocus.com/bid/16606Exploit
http://www.vupen.com/english/advisories/2006/0561Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24654
http://secubox.shadock.net/Invision_Power_Board_Army_System_Mod_2.1_and_prior_SQL_Injection_Exploit.htmlExploit, Vendor Advisory
http://secunia.com/advisories/18840Vendor Advisory
http://www.securityfocus.com/archive/1/424846/100/0/threaded
http://www.securityfocus.com/bid/16606Exploit
http://www.vupen.com/english/advisories/2006/0561Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24654

Timeline

Published: Feb 18, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-075110.0Multiple unspecified vulnerabilities in the (1) Filesystem in USErspace (FUSE) client and (2) NOOFS daemon in in Network Object Oriented Fil CVE-2006-07525.0Niels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack implementations would drop, which allows r CVE-2006-07532.6Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory cons CVE-2006-07545.0dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain CVE-2006-07555.6Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, allow remote attackers t CVE-2006-07565.0dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible under the /docs/ directory after installation, which allows CVE-2006-07577.5Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contact CVE-2006-07584.3Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitrary web script or HTM CVE-2006-07597.5Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the cont CVE-2006-07602.6LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass URL checks and obtain s CVE-2006-07615.1Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 fo CVE-2006-07624.6WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application by renaming or moving