IP
Vendor
Invision Power Services
74
CVEs
0
On KEV
0
New 30D
Products
IP–
Invision Power Board
Invision Power Services
40 CVEs0 on KEV0 new
IB–
Invision Board
Invision Power Services
19 CVEs0 on KEV0 new
IG–
Invision Gallery
Invision Power Services
9 CVEs0 on KEV0 new
IC–
Invision Community Blog
Invision Power Services
5 CVEs0 on KEV0 new
IP–
Invision Power Top Site List
Invision Power Services
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2008-6565 | IP Invision Power Board Invision Power Services | – | Mar 31 | Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an IFRAME tag in the… |
| CVE-2008-4171 | IP Invision Power Board Invision Power Services | – | Sep 22 | SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name… |
| CVE-2008-1359 | IP Invision Power Board Invision Power Services | – | Mar 17 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 before 2008-03-13 allows remote attackers to inject arbitrary web script or HTML via… |
| CVE-2008-0913 | IP Invision Power Board Invision Power Services | – | Feb 22 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an… |
| CVE-2008-0421 | IG Invision Gallery Invision Power Services | – | Jan 23 | SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command |
| CVE-2007-5688 | IP Invision Power Board Invision Power Services | – | Oct 29 | Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow… |
| CVE-2007-4912 | IP Invision Power Board Invision Power Services | – | Sep 17 | Cross-site scripting (XSS) vulnerability in ips_kernel/class_ajax.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to inject arbitrary… |
| CVE-2007-4914 | IP Invision Power Board Invision Power Services | – | Sep 17 | Unspecified vulnerability in the subscriptions manager in Invision Power Board (IPB or IP.Board) 2.3.1 before 20070912 allows remote authenticated users to change the member ID… |
| CVE-2007-4913 | IP Invision Power Board Invision Power Services | – | Sep 17 | ips_kernel/class_upload.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files with crafted image filenames to… |
| CVE-2007-3219 | IP Invision Power Board Invision Power Services | – | Jun 14 | Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's… |
| CVE-2007-2963 | IP Invision Power Board Invision Power Services | – | May 31 | Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board (IPB or IP.Board) 2.2.2, and possibly earlier, allows remote attackers to inject arbitrary web script… |
| CVE-2007-2349 | IP Invision Power Board Invision Power Services | – | Apr 30 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board) 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted… |
| CVE-2006-7071 | IP Invision Power Board Invision Power Services | – | Mar 2 | SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote attackers to execute arbitrary SQL commands via the CLIENT_IP… |
| CVE-2006-7064 | IP Invision Power Board Invision Power Services | – | Feb 24 | Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML as the… |
| CVE-2006-6370 | IG Invision Gallery Invision Power Services | – | Dec 7 | SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to cause a denial of service and possibly have other impacts, as… |
| CVE-2006-6369 | IC Invision Community Blog Invision Power Services | – | Dec 7 | SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when… |
| CVE-2006-5206 | IG Invision Gallery Invision Power Services | – | Oct 10 | SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php,… |
| CVE-2006-5205 | IG Invision Gallery Invision Power Services | – | Oct 10 | Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a |
| CVE-2006-5204 | IP Invision Power Board Invision Power Services | – | Oct 10 | Cross-site scripting (XSS) vulnerability in action_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier allows remote authenticated users to inject arbitrary web… |
| CVE-2006-5203 | IP Invision Power Board Invision Power Services | – | Oct 10 | Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum… |
| CVE-2006-4155 | IP Invision Power Board Invision Power Services | – | Aug 16 | Unspecified vulnerability in func_topic_threaded.php (aka threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote attackers to "access posts… |
| CVE-2006-3544 | IB Invision Board Invision Power Services | – | Jul 13 | Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a (1) Stats, (2)… |
| CVE-2006-3543 | IP Invision Power Board Invision Power Services | – | Jul 13 | Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the (1) idcat and (2) code parameters… |
| CVE-2006-3197 | IP Invision Power Board Invision Power Services | – | Jun 23 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a POST that contains… |
| CVE-2006-2498 | IP Invision Power Board Invision Power Services | – | May 20 | Invision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving (1) the post_icon variable in… |
| CVE-2006-2251 | IC Invision Community Blog Invision Power Services | – | May 9 | SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to… |
| CVE-2006-2217 | IP Invision Power Board Invision Power Services | – | May 5 | SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a reputation action |
| CVE-2006-2204 | IP Invision Power Board Invision Power Services | – | May 5 | SQL injection vulnerability in the topic deletion functionality (post_delete function in func_mod.php) for Invision Power Board 2.1.5 allows remote authenticated moderators to… |
| CVE-2006-2202 | IG Invision Gallery Invision Power Services | – | May 4 | SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter |
| CVE-2006-2097 | IP Invision Power Board Invision Power Services | – | Apr 29 | SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands via the from_contact field in a private… |
| CVE-2006-2059 | IP Invision Power Board Invision Power Services | – | Apr 26 | action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of… |
| CVE-2006-2061 | IB Invision Board Invision Power Services | – | Apr 26 | SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via… |
| CVE-2006-2060 | IP Invision Power Board Invision Power Services | – | Apr 26 | Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to… |
| CVE-2006-1369 | IP Invision Power Board Invision Power Services | – | Mar 23 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a… |
| CVE-2006-1326 | IP Invision Power Board Invision Power Services | – | Mar 21 | Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) result_type, (2)… |
| CVE-2006-1288 | IP Invision Power Board Invision Power Services | – | Mar 19 | Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related… |
| CVE-2006-1287 | IP Invision Power Board Invision Power Services | – | Mar 19 | Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060130 allows remote attackers to steal cookies and probably conduct other… |
| CVE-2006-1267 | IP Invision Power Board Invision Power Services | – | Mar 19 | Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying… |
| CVE-2006-1076 | IP Invision Power Board Invision Power Services | – | Mar 9 | SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 allows remote attackers to execute arbitrary SQL commands via… |
| CVE-2006-0910 | IP Invision Power Board Invision Power Services | – | Feb 28 | Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to multiple directories, including (1)… |
| CVE-2006-0909 | IP Invision Power Board Invision Power Services | – | Feb 28 | Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP scripts that include the full path in error… |
| CVE-2006-0888 | IP Invision Power Board Invision Power Services | – | Feb 25 | index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of… |
| CVE-2005-3547 | IB Invision Board Invision Power Services | – | Nov 16 | Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3)… |
| CVE-2005-3549 | IB Invision Board Invision Power Services | – | Nov 16 | Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP… |
| CVE-2005-3548 | IB Invision Board Invision Power Services | – | Nov 16 | Directory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows limited remote attackers to include files via a |
| CVE-2005-3477 | IG Invision Gallery Invision Power Services | – | Nov 3 | Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script… |
| CVE-2005-3395 | IG Invision Gallery Invision Power Services | – | Nov 1 | SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter |
| CVE-2005-2542 | IB Invision Board Invision Power Services | – | Aug 10 | Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, which is automatically downloaded and processed as HTML |
| CVE-2005-1946 | IC Invision Community Blog Invision Power Services | – | Jun 9 | Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to an editentry,… |
| CVE-2005-1948 | IG Invision Gallery Invision Power Services | – | Jun 9 | Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment… |
| CVE-2005-1945 | IC Invision Community Blog Invision Power Services | – | Jun 9 | Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML… |
| CVE-2005-1817 | IB Invision Board Invision Power Services | – | Jun 1 | Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters |
| CVE-2005-1816 | IB Invision Board Invision Power Services | – | Jun 1 | Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen |
| CVE-2005-1598 | IB Invision Board Invision Power Services | – | May 16 | SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash… |
| CVE-2005-1597 | IB Invision Board Invision Power Services | – | May 16 | Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web… |
| CVE-2005-0886 | IB Invision Board Invision Power Services | – | May 2 | Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request |
| CVE-2005-0217 | IC Invision Community Blog Invision Power Services | – | May 2 | SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter |
| CVE-2005-1070 | IB Invision Board Invision Power Services | – | Apr 11 | SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter |
| CVE-2005-0477 | IP Invision Power Board Invision Power Services | – | Mar 30 | Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary web script via (1) a signature file or… |
| CVE-2004-1578 | IP Invision Power Board Invision Power Services | – | Dec 31 | Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the… |