Page 2 of 13 results (0.004 seconds)

CVSS: 6.1EPSS: 0%CPEs: 15EXPL: 1

26 Mar 2005 — Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request. • https://www.exploit-db.com/exploits/25267 •

CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 2

31 Dec 2004 — SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter. • https://www.exploit-db.com/exploits/648 •

CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0

18 Mar 2004 — SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter. • http://marc.info/?l=bugtraq&m=107799527428834&w=2 •