Lucene search

[email protected]CVE-2005-1070

HistoryApr 11, 2005 - 4:00 a.m.

CVE-2005-1070

2005-04-1104:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

sql injection

invision power board

security vulnerability

remote execution

nvd

cve-2005-1070

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.6%

JSON

SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter.

CPENameOperatorVersion
invision_power_services:invision_boardinvision power services invision boardeq1.3
invision_power_services:invision_boardinvision power services invision boardeq1.3.1_final
invision_power_services:invision_boardinvision power services invision boardeq1.1.1
invision_power_services:invision_boardinvision power services invision boardeq1.2
invision_power_services:invision_boardinvision power services invision boardeq1.0
invision_power_services:invision_boardinvision power services invision boardeq1.1.2
invision_power_services:invision_boardinvision power services invision boardeq1.3_final
invision_power_services:invision_boardinvision power services invision boardeq1.0.1

CPE	Name	Operator	Version
invision_power_services:invision_board	invision power services invision board	eq	1.3
invision_power_services:invision_board	invision power services invision board	eq	1.3.1_final
invision_power_services:invision_board	invision power services invision board	eq	1.1.1
invision_power_services:invision_board	invision power services invision board	eq	1.2
invision_power_services:invision_board	invision power services invision board	eq	1.0
invision_power_services:invision_board	invision power services invision board	eq	1.1.2
invision_power_services:invision_board	invision power services invision board	eq	1.3_final
invision_power_services:invision_board	invision power services invision board	eq	1.0.1

References

www.securityfocus.com/archive/1/395515

www.securityfocus.com/bid/13097

www.securitytracker.com/alerts/2005/Apr/1013676.html

exchange.xforce.ibmcloud.com/vulnerabilities/20059

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.6%

JSON

Related for CVE-2005-1070

nessus1