CVE-2006-0750

Supersmashbrothers Army System - SQL Injection

Title source: rule

Description

SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the userstat parameter in an army action to index.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by fRoGGz · phpwebappsphp

https://www.exploit-db.com/exploits/1492

View Code ZIP pw:eip

References (6)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/424846/100/0/threaded

[Exploit, Vendor Advisory] http://secubox.shadock.net/Invision_Power_Board_Army_System_Mod_2.1_and_prior_SQL_Injection_Exploit.html

[Vendor Advisory] http://secunia.com/advisories/18840

[Exploit] http://www.securityfocus.com/bid/16606

[Vendor Advisory] http://www.vupen.com/english/advisories/2006/0561

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/24654

Scores

EPSS 0.0088

EPSS Percentile 75.4%

Details

CWE

CWE-89

Status published

Products (1)

supersmashbrothers/army_system 2.1.0_for_ipb

Published Feb 18, 2006

Tracked Since Feb 18, 2026