EUVD-2005-1948

Malware in sbrugna...

EUVD-2005-1947

Malware in sbrugna...

CVE-2005-1946

Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to an editentry, replyentry, or editcomment action, or 2 the mid parameter to an aboutme action...

CVE-2005-1945

Cross-site scripting XSS vulnerability in the converthighlitewords function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data...

CVE-2005-1946

CVE-2005-1946 affects Invision Blog (Invision Community Blog). The issue is multiple SQL injection vulnerabilities in the application’s input handling, allowing remote attackers to inject arbitrary SQL via the parameters (in editentry, replyentry, or editcomment actions) or (in the aboutme acti...

CVE-2005-1945

CVE-2005-1945 affects Invision Blog prior to 1.1.2 Final. The vulnerability resides in the convert_highlite_words function, allowing remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data (XSS). Impact is cross-site scripting with partial integrity impact as...

Invision Community Blog Vulnerabilities

GulfTech Security Research June 7th, 2005 Vendor : Invision Power Services URL : http://www.invisionblog.com Version : All Versions Prior To 1.1.2 Final Risk : Multiple Vulnerabilities Description: Invision Blog is a community based blogging software that can be integrated into Invision Power...

CVE-2005-1946

Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to an editentry, replyentry, or editcomment action, or 2 the mid parameter to an aboutme action...

CVE-2005-1945

Cross-site scripting XSS vulnerability in the converthighlitewords function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data...