CVE-2006-2061

Invision Power Board 2.0.x-2.1.x - SQL Injection via ck Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-2061. PoCs published by IceShaman.

AI-analyzed exploit summary The provided code is a writeup describing an SQL injection vulnerability in Invision Power Board. It includes a proof-of-concept URL demonstrating the vulnerability but lacks executable exploit code.

Description

SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters.

Exploits (1)

exploitdb WRITEUP VERIFIED
by IceShaman · textwebappsphp
https://www.exploit-db.com/exploits/27736

The provided code is a writeup describing an SQL injection vulnerability in Invision Power Board. It includes a proof-of-concept URL demonstrating the vulnerability but lacks executable exploit code.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: Invision Power Board
No auth needed
Prerequisites: Access to the target application
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26071
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/432226/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/796
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17690
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19830
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1534
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/431990/100/0/threaded

Scores

EPSS 0.0157
EPSS Percentile 72.4%

Details

Status published
Products (13)
invision_power_services/invision_board 2.0
invision_power_services/invision_board 2.0.1
invision_power_services/invision_board 2.0.2
invision_power_services/invision_board 2.0.3
invision_power_services/invision_board 2.0.4
invision_power_services/invision_board 2.0_alpha_3
invision_power_services/invision_board 2.0_pdr3
invision_power_services/invision_board 2.0_pf1
invision_power_services/invision_board 2.0_pf2
invision_power_services/invision_board 2.1
... and 3 more
Published Apr 26, 2006
Tracked Since Feb 18, 2026