Page 2 of 16 results (0.003 seconds)

CVSS: 4.6EPSS: 0%CPEs: 17EXPL: 1

CVE-2005-1816

https://notcve.org/view.php?id=CVE-2005-1816

01 Jun 2005 — Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen. • http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0635.html •

CVSS: 6.1EPSS: 0%CPEs: 9EXPL: 1

CVE-2005-1597 – Invision Power Board (IP.Board) < 2.0.3 - Multiple Vulnerabilities

https://notcve.org/view.php?id=CVE-2005-1597

16 May 2005 — Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter. • https://www.exploit-db.com/exploits/43824 •

CVSS: 9.8EPSS: 7%CPEs: 9EXPL: 4

CVE-2005-1598 – Invision Power Board 2.0.3 - 'login.php' SQL Injection

https://notcve.org/view.php?id=CVE-2005-1598

16 May 2005 — SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable. • https://www.exploit-db.com/exploits/1013 •

CVSS: 6.1EPSS: 0%CPEs: 15EXPL: 1

CVE-2005-0886 – Invision Power Board 1.x/2.0 - HTML Injection

https://notcve.org/view.php?id=CVE-2005-0886

26 Mar 2005 — Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request. • https://www.exploit-db.com/exploits/25267 •

CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 2

CVE-2004-1531 – Invision Power Board 2.0.0 < 2.0.2 - SQL Injection

https://notcve.org/view.php?id=CVE-2004-1531

31 Dec 2004 — SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter. • https://www.exploit-db.com/exploits/648 •

CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0

CVE-2004-0338

https://notcve.org/view.php?id=CVE-2004-0338

18 Mar 2004 — SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter. • http://marc.info/?l=bugtraq&m=107799527428834&w=2 •