Invision Power Board
Approved changes feed: RSS · Atom
cpe:2.3:a:invision_power_services:invision_power_board:1.3:*:*:*:*:*:*:*
part: a version: 1.3 update: *
| Vendor | Invision Power Services (874d7196-accf-52a5-a9bf-11780ed5a490) |
|---|---|
| Product | Invision Power Board (24575f0c-07a6-5092-8b4f-6b25834cd46f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-6565 |
vulnerable | 2026-06-08 04:50:55.403205 |
Details available
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an IFRAME tag in the signature.
Published: 2009-03-31T17:00:00.000Z
Updated: 2024-08-07T11:34:47.156Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-7064 |
vulnerable | 2026-06-08 04:49:30.260033 |
Details available
Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML as the administrator via the phpinfo parameter.
Published: 2007-02-24T01:00:00.000Z
Updated: 2024-08-07T20:50:05.948Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5204 |
vulnerable | 2026-06-08 04:49:20.009592 |
Details available
Cross-site scripting (XSS) vulnerability in action_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a reference to a script in the avatar setting, which can be leveraged for a cross-site request forgery (CSRF) attack involving forced SQL execution by an admin.
Published: 2006-10-09T19:00:00.000Z
Updated: 2024-08-07T19:41:05.657Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5203 |
vulnerable | 2026-06-08 04:49:19.994493 |
Details available
Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the Admin control panel.
Published: 2006-10-09T19:00:00.000Z
Updated: 2024-08-07T19:41:05.748Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3543 |
vulnerable | 2026-06-08 04:49:09.610504 |
Details available
Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the (1) idcat and (2) code parameters in a ketqua action in index.php; the id parameter in a (3) Attach and (4) ref action in index.php; the CODE parameter in a (5) Profile, (6) Login, and (7) Help action in index.php; and the (8) member_id parameter in coins_list.php. NOTE: the developer has disputed this issue, stating that the "CODE attribute is never present in an SQL query" and the "'ketqua' [action] and file 'coin_list.php' are not standard IPB 2.x features". It is unknown whether these vectors are associated with an independent module or modification of IPB
Published: 2006-07-13T00:00:00.000Z
Updated: 2024-08-07T18:30:34.404Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2097 |
vulnerable | 2026-06-08 04:48:58.881602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0477 |
vulnerable | 2026-06-08 04:48:12.775701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.