Approved changes feed: RSS · Atom

cpe:2.3:a:invision_power_services:invision_community_blog:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

VendorInvision Power Services (874d7196-accf-52a5-a9bf-11780ed5a490)
ProductInvision Community Blog (9e06a220-49d6-5756-bd75-5e22c091c166)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2251 vulnerable 2026-06-08 04:49:06.135479 Details available
SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.
Published: 2006-05-09T10:00:00.000Z
Updated: 2024-08-07T17:43:28.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1946 vulnerable 2026-06-08 04:48:27.948064 Details available
Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to an editentry, replyentry, or editcomment action, or (2) the mid parameter to an aboutme action.
Published: 2005-06-14T04:00:00.000Z
Updated: 2024-08-07T22:06:57.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1945 vulnerable 2026-06-08 04:48:27.947675 Details available
Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data.
Published: 2005-06-14T04:00:00.000Z
Updated: 2024-08-07T22:06:57.695Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.