Invision Power Services Invision Community Blog vulnerabilities
5 known vulnerabilities affecting invision_power_services/invision_community_blog.
Total CVEs
5
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH3MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2006-6369P3HIGHCVSS 7.5PoCv1.2.42006-12-07
CVE-2006-6369 [HIGH] CVE-2006-6369: SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows
SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality.
nvd
CVE-2005-1946P3HIGHCVSS 7.5v1.0v1.12005-06-09
CVE-2005-1946 [HIGH] CVE-2005-1946: Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to
Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to an editentry, replyentry, or editcomment action, or (2) the mid parameter to an aboutme action.
nvd
CVE-2005-0217P4HIGHCVSS 7.5v1.02005-05-02
CVE-2005-0217 [HIGH] CVE-2005-0217: SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execu
SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter.
nvd
CVE-2006-2251P4MEDIUMCVSS 6.4v1.0v1.1+2 more2006-05-09
CVE-2006-2251 [MEDIUM] CVE-2006-2251: SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.
SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.
nvd
CVE-2005-1945P4MEDIUMCVSS 4.3v1.0v1.12005-06-09
CVE-2005-1945 [MEDIUM] CVE-2005-1945: Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog bef
Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data.
nvd