EIP-2026-107925

The provided text describes an SQL injection vulnerability in Invision Power Board's 'ssi.php' script, where improper filtering of user-supplied data allows attackers to pass SQL statements to the underlying database. The impact varies depending on the database but may include data corruption, sensitive data exposure, or command execution.