Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Invision Power ServicesInvision Power Board1.3 final

8 matches found

CVE
CVE•added 2005/03/30 5:0 a.m.•40 views

CVE-2005-0477

Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary web script via (1) a signature file or (2) a message post containing an IMG tag within a COLOR tag whose style is set to background:url.

4.3CVSS6AI score0.00424EPSS
CVE
CVE•added 2006/04/29 10:2 a.m.•40 views

CVE-2006-2097

SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands via the from_contact field in a private message (PM).

7.5CVSS8.3AI score0.00698EPSS
CVE
CVE•added 2005/07/19 4:0 a.m.•38 views

CVE-2004-2279

Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other users via the pop parameter in a chat action to index.php.

4.3CVSS6.3AI score0.00442EPSS
CVE
CVE•added 2006/07/13 12:5 a.m.•38 views

CVE-2006-3543

Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the (1) idcat and (2) code parameters in a ketqua action in index.php; the id parameter in a (3) Attach and (4) ref action in index.php; the CODE parameter i...

7.5CVSS8.9AI score0.00327EPSS
CVE
CVE•added 2009/03/31 5:30 p.m.•33 views

CVE-2008-6565

Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an IFRAME tag in the signature.

4.3CVSS5.9AI score0.00147EPSS
CVE
CVE•added 2006/10/10 4:6 a.m.•31 views

CVE-2006-5203

Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the...

5.1CVSS7.9AI score0.00306EPSS
CVE
CVE•added 2007/02/24 1:28 a.m.•31 views

CVE-2006-7064

Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML as the administrator via the phpinfo parameter.

9.3CVSS5.7AI score0.00567EPSS
CVE
CVE•added 2006/10/10 4:6 a.m.•30 views

CVE-2006-5204

Cross-site scripting (XSS) vulnerability in action_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a reference to a script in the avatar setting, which can be leveraged for a cross-site request forgery (CS...

2.1CVSS6.3AI score0.00479EPSS