Lucene search

K
Invision Power ServicesInvision Board2.0.1

7 matches found

CVE
CVE
added 2005/06/01 4:0 a.m.46 views

CVE-2005-1816

Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen.

4.6CVSS6.6AI score0.00064EPSS
CVE
CVE
added 2005/08/10 4:0 a.m.46 views

CVE-2005-2542

Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, which is automatically downloaded and processed as HTML.

5CVSS6.9AI score0.03333EPSS
CVE
CVE
added 2005/05/02 4:0 a.m.43 views

CVE-2005-0886

Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request.

4.3CVSS5.8AI score0.00462EPSS
CVE
CVE
added 2005/02/19 5:0 a.m.40 views

CVE-2004-1531

SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter.

7.5CVSS8.4AI score0.00708EPSS
CVE
CVE
added 2005/11/16 7:42 a.m.39 views

CVE-2005-3548

Directory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows limited remote attackers to include files via a .. (dot dot) in the "Task PHP File To Run" field.

4CVSS7AI score0.00272EPSS
CVE
CVE
added 2006/04/26 8:6 p.m.34 views

CVE-2006-2061

SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters.

5CVSS8.4AI score0.01635EPSS
CVE
CVE
added 2005/11/16 7:42 a.m.28 views

CVE-2005-3549

Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP File To Run" field and selecting "Run Task Now".

6.5CVSS8.3AI score0.01267EPSS