Browse CVEs

HIGH 7.5 CVE-2008-4171 SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL … Invision Power Board Patch available Fix from $1,9502008-09-22 HIGH 7.5 CVE-2008-0421 SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter i… Invision Gallery after 2.0.7 Fix from $1,9502008-01-23 HIGH 7.5 CVE-2007-5688 Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Boa… Invision Power Board No fix yet Fix from $1,9502007-10-29 HIGH 7.5 CVE-2007-4913 ips_kernel/class_upload.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files w… Invision Power Board after 2.3.1 Fix from $1,9502007-09-17 MEDIUM 6.0 CVE-2007-4914 Unspecified vulnerability in the subscriptions manager in Invision Power Board (IPB or IP.Board) 2.3.1 before 20070912 allows remote authenticated us… Invision Power Board after 2.3.1 Fix from $1,6002007-09-17 HIGH 7.8 CVE-2007-3219 Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers t… Invision Power Board Patch available Fix from $1,9502007-06-14 MEDIUM 5.8 CVE-2007-2349 Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board) 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or… Invision Power Board Patch available Fix from $1,6002007-04-30 HIGH 7.5 CVE-2006-7071 SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote attackers to execute arbitrary S… Invision Power Board Patch available Fix from $1,9502007-03-02 HIGH 9.3 CVE-2006-7064 Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitr… Invision Power Board Mitigation only Fix from $1,9502007-02-24 HIGH 7.5 CVE-2006-6369 SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL comman… Invision Community Blog Patch available Fix from $1,9502006-12-07 HIGH 7.5 CVE-2006-6370 SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to cause a denial of service and poss… Invision Gallery Mitigation only Fix from $1,9502006-12-07 HIGH 7.5 CVE-2006-5206 SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.… Invision Gallery after 2.0.7 Fix from $1,9502006-10-10 MEDIUM 5.1 CVE-2006-5203 Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL… Invision Power Board after 2.1.7 Fix from $1,6002006-10-10 MEDIUM 5.0 CVE-2006-5205EPSS 11% Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir pa… Invision Gallery No fix yet Fix from $1,6002006-10-10 HIGH 7.5 CVE-2006-4155 Unspecified vulnerability in func_topic_threaded.php (aka threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote … Invision Power Board after 2.1.7 Fix from $1,9502006-08-16 HIGH 7.5 CVE-2006-3543 Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the (1)… Invision Power Board No fix yet Fix from $1,9502006-07-13 HIGH 7.5 CVE-2006-3544 Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE … Invision Board No fix yet Fix from $1,9502006-07-13 MEDIUM 6.4 CVE-2006-2498 Invision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving (1) the post_icon variab… Invision Power Board Patch available Fix from $1,6002006-05-20 MEDIUM 6.4 CVE-2006-2251 SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with … Invision Community Blog Patch available Fix from $1,6002006-05-09 HIGH 7.5 CVE-2006-2217 SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a… Invision Power Board Mitigation only Fix from $1,9502006-05-05 MEDIUM 5.5 CVE-2006-2204 SQL injection vulnerability in the topic deletion functionality (post_delete function in func_mod.php) for Invision Power Board 2.1.5 allows remote a… Invision Power Board Patch available Fix from $1,6002006-05-05 MEDIUM 6.4 CVE-2006-2202 SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter. Invision Gallery Patch available Fix from $1,6002006-05-04 HIGH 7.5 CVE-2006-2097 SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands via the fro… Invision Power Board after 2.1.4 Fix from $1,9502006-04-29 MEDIUM 6.4 CVE-2006-2060 Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote au… Invision Power Board Patch available Fix from $1,6002006-04-26 MEDIUM 5.0 CVE-2006-2059EPSS 8% action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a se… Invision Power Board Patch available Fix from $1,6002006-04-26 MEDIUM 5.0 CVE-2006-2061 SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to exec… Invision Board Patch available Fix from $1,6002006-04-26 MEDIUM 6.8 CVE-2006-1369 Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary … Invision Power Board Mitigation only Fix from $1,6002006-03-23 HIGH 7.5 CVE-2006-1288 Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL … Invision Power Board Patch available Fix from $1,9502006-03-19 MEDIUM 5.8 CVE-2006-1287 Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060130 allows remote attackers to steal cookies and p… Invision Power Board Patch available Fix from $1,6002006-03-19 MEDIUM 5.1 CVE-2006-1267 Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from th… Invision Power Board No fix yet Fix from $1,6002006-03-19