cbcvebase.
CVE-2005-1946
published 2005-06-09

CVE-2005-1946: Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter…

PriorityP336high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.28%
66.4th percentile
Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to an editentry, replyentry, or editcomment action, or (2) the mid parameter to an aboutme action.

Affected

2 ranges
VendorProductVersion rangeFixed in
invision_power_servicesinvision_community_blog——
invision_power_servicesinvision_community_blog——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.