CVE-2006-1153: d2-Shoutbox

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load parameter, when performing a Shoutbox action through Invision Power Board (IPB).

Affected products

• d2-Shoutbox d2-Shoutbox: version 4.2 only

Published 2006-03-10. Last modified 2026-06-16.