Skod

**Name of the Vulnerable Software and Affected Versions** shttpd version 1.34 **Description** A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a long URI. **Recommendations** For shttpd version 1.34, update to a version that fixes this issue, as using a long URI can lead to arbitrary code execution.

**Name of the Vulnerable Software and Affected Versions** D2-Shoutbox version 4.2 **Description** The issue allows remote attackers to execute arbitrary SQL commands via the `load` parameter when performing a Shoutbox action through Invision Power Board (IPB). This is a SQL injection vulnerability. **Recommendations** For D2-Shoutbox version 4.2, consider restricting access to the `load` parameter in the affected API endpoint until a patch is available. As a temporary workaround, avoid using the `load` parameter when performing Shoutbox actions through IPB. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Invision Power Board (IPB) version 2.0.1 **Description** The issue allows remote attackers to cause a denial of service by registering a large number of users when Code Confirmation is disabled in index.php. **Recommendations** For Invision Power Board (IPB) version 2.0.1, enable Code Confirmation to prevent the denial of service.