Page 4 of 33 results (0.001 seconds)

CVSS: 6.1EPSS: 0%CPEs: 9EXPL: 1

16 May 2005 — Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter. • https://www.exploit-db.com/exploits/43824 •

CVSS: 9.8EPSS: 7%CPEs: 9EXPL: 4

16 May 2005 — SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable. • https://www.exploit-db.com/exploits/1013 •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

31 Dec 2004 — Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header. • http://marc.info/?l=bugtraq&m=109701091207517&w=2 •