CVE-2008-4171

SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter.

Date published : 2008-09-22

http://www.securityfocus.com/bid/31288

http://forums.invisionpower.com/index.php?showtopic=276512