CVE-2005-1597

CVE-2005-1597 affects Invision Power Board (IPB) versions 2.0.3 and earlier. The vulnerability is a Cross-Site Scripting (XSS) flaw in the search.php and topics.php scripts, caused by unsanitized input in the highlite parameter, which allows arbitrary script/HTML injection. Public sources (IPB ex...

CVE-2005-1598

CVE-2005-1598 corresponds to a SQL Injection in Invision Power Board (IPB) <= 2.0.3. The vulnerability allows remote attackers to execute arbitrary SQL via a crafted pass_hash cookie that alters the internal $pid variable. Impact is partial confidentiality and integrity; variants include addit...

CVE-2005-1443

CVE-2005-1443 affects Invision Power Board (IPB) versions 2.0.3 and 2.1 Alpha 2. The vulnerability is a set of cross-site scripting (XSS) flaws in index.php allowing an attacker to inject arbitrary script/HTML via the (1) act, (2) Members, (3) calendar, or (4) HID parameters. The connected Red Ha...

CVE-2004-1536

CVE-2004-1536 affects the ibProArcade module of Invision Power Board (IPB) 1.x and 2.x. The vulnerability is a SQL injection in index.php through the cat parameter, allowing remote attackers to execute arbitrary SQL commands on the backend database. The Nessus/NVD/CVE references confirm remote-ex...

ipbSQL.txt

i have found an sql injection in the popular ipbproarcade mod for ipb systems 1.x and 2.x the vuln exists in the "category" field. buy using this field it is possible to inject any sql query and compemise the entire forum system p.o.c for ipb 1.x...

IpbProArace 2.5.x SQL injection.

i have found an sql injection in the popular ipbproarcade mod for ipb systems 1.x and 2.x the vuln exists in the "category" field. buy using this field it is possible to inject any sql query and compemise the entire forum system p.o.c for ipb 1.x...