Approved changes feed: RSS · Atom

cpe:2.3:a:invision_power_services:invision_board:2.1:*:*:*:*:*:*:*

part: a version: 2.1 update: *

VendorInvision Power Services (874d7196-accf-52a5-a9bf-11780ed5a490)
ProductInvision Board (af5c2001-dc26-5998-97d5-96b9402df5d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2061 vulnerable 2026-06-08 04:48:58.715683 Details available
SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters.
Published: 2006-04-26T20:00:00.000Z
Updated: 2024-08-07T17:35:31.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3547 vulnerable 2026-06-08 04:48:41.132611 Details available
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields.
Published: 2005-11-16T07:37:00.000Z
Updated: 2024-08-07T23:17:23.263Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.