Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.53022
Category:CGI abuses
Title:Invision Power Board Multiple Vulnerabilities
Summary:NOSUMMARY
Description:Description:

The remote version of Invision Power Board, according to its
version number, is vulnerable to multiple SQL and XSS attacks
as a result of improper sanitization of user-supplied input.
Attackers may delete albums/images, discover password hashes,
and affect database updates.

Version prior to 1.3.1 are known to be vulnerable.

Solution : Apply the appropriate patch or upgrade to a newer version.
http://www.invisionboard.com/

Risk factor : High

CVSS Score:
7.5

Cross-Ref: BugTraq ID: 13907
Common Vulnerability Exposure (CVE) ID: CVE-2005-1948
http://www.securityfocus.com/bid/13907
Bugtraq: 20050609 Invision Gallery Vulnerabilities (Google Search)
http://marc.info/?l=bugtraq&m=111834146710329&w=2
http://www.gulftech.org/?node=research&article_id=00079-06092005
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.