IP
Product
Invision Power Board
40
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Invision Power Board to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-6565 | – | Mar 31 | Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an IFRAME tag in the… Affected: through 2.3.1; 1.0; 1.0.1; 1.0.3; 1.1.1; 1.1.2; +34 more |
| CVE-2008-4171 | – | Sep 22 | SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name… Affected: 2.2; 2.3 |
| CVE-2008-1359 | – | Mar 17 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 before 2008-03-13 allows remote attackers to inject arbitrary web script or HTML via… Affected: through 2.3.4 |
| CVE-2008-0913 | – | Feb 22 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an… Affected: 2.3.4 |
| CVE-2007-5688 | – | Oct 29 | Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow… Affected: All versions, or not specified |
| CVE-2007-4913 | – | Sep 17 | ips_kernel/class_upload.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files with crafted image filenames to… Affected: through 2.3.1; 2.1.5_2006-03-08; 2.1.5_2006-04-25; 2.1.6; 2.2; 2.2.1; +1 more |
| CVE-2007-4914 | – | Sep 17 | Unspecified vulnerability in the subscriptions manager in Invision Power Board (IPB or IP.Board) 2.3.1 before 20070912 allows remote authenticated users to change the member ID… Affected: through 2.3.1; 2.1.5_2006-03-08; 2.1.5_2006-04-25; 2.1.6; 2.2; 2.2.1; +1 more |
| CVE-2007-4912 | – | Sep 17 | Cross-site scripting (XSS) vulnerability in ips_kernel/class_ajax.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to inject arbitrary… Affected: 2.1.5_2006-03-08; 2.1.5_2006-04-25; 2.1.6; 2.2; 2.2.1; 2.2.2 |
| CVE-2007-3219 | – | Jun 14 | Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's… Affected: 2.2; 2.2.1; 2.2.2 |
| CVE-2007-2963 | – | May 31 | Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board (IPB or IP.Board) 2.2.2, and possibly earlier, allows remote attackers to inject arbitrary web script… Affected: through 2.2.2 |
| CVE-2007-2349 | – | Apr 30 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board) 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted… Affected: 2.1; 2.2 |
| CVE-2006-7071 | – | Mar 2 | SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote attackers to execute arbitrary SQL commands via the CLIENT_IP… Affected: 2.1.1; 2.1.2; 2.1.3; 2.1.4; 2.1.5; 2.1.6 |
| CVE-2006-7064 | – | Feb 24 | Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML as the… Affected: 1.0; 1.0.1; 1.0.3; 1.1.1; 1.1.2; 1.2; +30 more |
| CVE-2006-5203 | – | Oct 10 | Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum… Affected: through 2.1.7; 1.0; 1.0.1; 1.0.3; 1.1.1; 1.1.2; +30 more |
| CVE-2006-5204 | – | Oct 10 | Cross-site scripting (XSS) vulnerability in action_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier allows remote authenticated users to inject arbitrary web… Affected: through 2.1.7; 1.0; 1.0.1; 1.0.3; 1.1.1; 1.1.2; +30 more |
| CVE-2006-4155 | – | Aug 16 | Unspecified vulnerability in func_topic_threaded.php (aka threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote attackers to "access posts… Affected: through 2.1.7 |
| CVE-2006-3543 | – | Jul 13 | Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the (1) idcat and (2) code parameters… Affected: 1.0; 1.0.1; 1.0.3; 1.1.1; 1.1.2; 1.2; +17 more |
| CVE-2006-3197 | – | Jun 23 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a POST that contains… Affected: 2.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.1.4; +8 more |
| CVE-2006-2498 | – | May 20 | Invision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving (1) the post_icon variable in… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.1; +13 more |
| CVE-2006-2217 | – | May 5 | SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a reputation action Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.1; +4 more |
| CVE-2006-2204 | – | May 5 | SQL injection vulnerability in the topic deletion functionality (post_delete function in func_mod.php) for Invision Power Board 2.1.5 allows remote authenticated moderators to… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.x; +13 more |
| CVE-2006-2097 | – | Apr 29 | SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands via the from_contact field in a private… Affected: through 2.1.4; 1.0; 1.0.1; 1.1.1; 1.1.2; 1.2; +20 more |
| CVE-2006-2061 | – | Apr 26 | SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via… Affected: 2.1.5_2006-03-08 |
| CVE-2006-2060 | – | Apr 26 | Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to… Affected: 2.0.x; 2.1.x |
| CVE-2006-2059 | – | Apr 26 | action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of… Affected: 2.1.5_2006-03-08 |
| CVE-2006-1369 | – | Mar 23 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a… Affected: 2.1; 2.1.5; 2.1_alpha2 |
| CVE-2006-1326 | – | Mar 21 | Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) result_type, (2)… Affected: 2.0.4 |
| CVE-2006-1288 | – | Mar 19 | Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related… Affected: 2.0.4; 2.1.4 |
| CVE-2006-1287 | – | Mar 19 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060130 allows remote attackers to steal cookies and probably conduct other… Affected: 2.0.4; 2.1.4 |
| CVE-2006-1267 | – | Mar 19 | Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying… Affected: 2.1.4 |
| CVE-2006-1076 | – | Mar 9 | SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 allows remote attackers to execute arbitrary SQL commands via… Affected: 2.1.5 |
| CVE-2006-0909 | – | Feb 28 | Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP scripts that include the full path in error… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.1.0; +9 more |
| CVE-2006-0910 | – | Feb 28 | Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to multiple directories, including (1)… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.1.0; +9 more |
| CVE-2006-0888 | – | Feb 25 | index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of… Affected: 2.0.1 |
| CVE-2005-1597 | – | May 16 | Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web… Affected: 2.0.3 |
| CVE-2005-1598 | – | May 16 | SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash… Affected: 2.0.3 |
| CVE-2005-0477 | – | Mar 30 | Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary web script via (1) a signature file or… Affected: 1.0; 1.0.1; 1.1.1; 1.1.2; 1.2; 1.3; +2 more |
| CVE-2004-1578 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the… Affected: 2.0.0 |
| CVE-2004-2279 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other users via the pop parameter in a chat… Affected: 1.3_final |
| CVE-2003-1385 | – | Dec 31 | ipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code, if register_globals is enabled, by modifying the root_path parameter to reference a… Affected: 1.1.1 |
Showing 40