Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-2059. PoCs published by RusH.
AI-analyzed exploit summary This exploit targets a command execution vulnerability in Invision Power Board 2.* by leveraging authenticated session manipulation and crafted post content to execute arbitrary commands. It requires valid user credentials and forum access.
Description
action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expression to add a "#e" (execute) modifier.
Exploits (1)
This exploit targets a command execution vulnerability in Invision Power Board 2.* by leveraging authenticated session manipulation and crafted post content to execute arbitrary commands. It requires valid user credentials and forum access.