IB
Product
Invision Board
19
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Invision Board to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-3544 | – | Jul 13 | Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a (1) Stats, (2)… Affected: 1.3.1_final; 1.3_final |
| CVE-2006-2061 | – | Apr 26 | SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via… Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0_alpha_3; +6 more |
| CVE-2005-3549 | – | Nov 16 | Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP… Affected: 2.0.1 |
| CVE-2005-3548 | – | Nov 16 | Directory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows limited remote attackers to include files via a Affected: 2.0.1 |
| CVE-2005-3547 | – | Nov 16 | Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3)… Affected: 2.1 |
| CVE-2005-2542 | – | Aug 10 | Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, which is automatically downloaded and processed as HTML Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0_alpha_3; +4 more |
| CVE-2005-1817 | – | Jun 1 | Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters Affected: 1.0; 1.0.1; 1.1.1; 1.1.2; 1.2; 1.3; +1 more |
| CVE-2005-1816 | – | Jun 1 | Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen Affected: 1.0; 1.0.1; 1.1.1; 1.1.2; 1.2; 1.3; +11 more |
| CVE-2005-1597 | – | May 16 | Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web… Affected: 1.0; 1.0.1; 1.1.1; 1.1.2; 1.2; 1.3; +2 more |
| CVE-2005-1598 | – | May 16 | SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash… Affected: 1.0; 1.0.1; 1.1.1; 1.1.2; 1.2; 1.3; +2 more |
| CVE-2005-0886 | – | May 2 | Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request Affected: 1.0; 1.0.1; 1.1.1; 1.1.2; 1.2; 1.3; +9 more |
| CVE-2005-1070 | – | Apr 11 | SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter Affected: 1.0; 1.0.1; 1.1.1; 1.1.2; 1.2; 1.3; +2 more |
| CVE-2004-1531 | – | Dec 31 | SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter Affected: 2.0; 2.0.1; 2.0.2 |
| CVE-2004-0359 | – | Nov 23 | Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the (1) c, (2) f,… Affected: 1.3.1_final; 1.3_final |
| CVE-2004-0355 | – | Nov 23 | Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the… Affected: 1.3 |
| CVE-2004-0338 | – | Nov 23 | SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter Affected: 1.0; 1.0.1; 1.1.1; 1.1.2; 1.2; 1.3; +2 more |
| CVE-2004-1785 | – | Jan 3 | SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the… Affected: 1.0; 1.0.1; 1.1.1; 1.1.2; 1.2; 1.3 |
| CVE-2003-1454 | – | Dec 31 | Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote… Affected: 1.0; 1.0.1; 1.1.1 |
| CVE-2002-1149 | – | Oct 11 | The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames,… Affected: 1.0; 1.0.1 |
Showing 19