Page 12 of 73 results (0.004 seconds)

CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 4

CVE-2005-1598 – Invision Power Board 2.0.3 - 'login.php' SQL Injection

https://notcve.org/view.php?id=CVE-2005-1598

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable. • https://www.exploit-db.com/exploits/1013 https://www.exploit-db.com/exploits/1014 https://www.exploit-db.com/exploits/43824 http://forums.invisionpower.com/index.php?showtopic=168016 http://marc.info/?l=bugtraq&m=111539908705851&w=2 http://marc.info/?l=bugtraq&m=111712587206834&w=2 http://secunia.com/advisories/15265 http://securitytracker.com/id?1013907 http://securitytracker.com/id? •

CVSS: 6.8EPSS: 1%CPEs: 2EXPL: 1

CVE-2005-1443

https://notcve.org/view.php?id=CVE-2005-1443

Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitrary web script or HTML via the (1) act, (2) Members, (3) calendar, or (4) HID parameters. • http://securitytracker.com/id?1013863 •

CVSS: 7.5EPSS: 1%CPEs: 8EXPL: 1

CVE-2005-1070 – Invision Power Board 1.x - 'ST' SQL Injection

https://notcve.org/view.php?id=CVE-2005-1070

SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter. • https://www.exploit-db.com/exploits/25380 http://www.securityfocus.com/archive/1/395515 http://www.securityfocus.com/bid/13097 http://www.securitytracker.com/alerts/2005/Apr/1013676.html https://exchange.xforce.ibmcloud.com/vulnerabilities/20059 •

CVSS: 4.3EPSS: 0%CPEs: 15EXPL: 1

CVE-2005-0886 – Invision Power Board 1.x/2.0 - HTML Injection

https://notcve.org/view.php?id=CVE-2005-0886

Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request. • https://www.exploit-db.com/exploits/25267 http://www.securityfocus.com/bid/12888 •

CVSS: 4.3EPSS: 0%CPEs: 8EXPL: 1

CVE-2005-0477 – Invision Power Board (IP.Board) 1.x/2.0.3 - SML Code Script Injection

https://notcve.org/view.php?id=CVE-2005-0477

Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary web script via (1) a signature file or (2) a message post containing an IMG tag within a COLOR tag whose style is set to background:url. Vulnerabilidad de secuencias de comandos en sitios cruzados en el código SML de Invision Power Board 1.3.1 FINAL permite a atacantes remotos la inyección de sripts arbitrarios mediante: un fichero de firmas, un mensaje que contiene una etiqueta IMG en una etiqueta COLOR cuyo estilo está puesto como background:url. • https://www.exploit-db.com/exploits/25143 http://marc.info/?l=bugtraq&m=110868196922995&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19399 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •