Filtered by vendor Invision Power Services Subscriptions
Filtered by product Invision Power Board Subscriptions
Total 42 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-1443 1 Invision Power Services 1 Invision Power Board 2025-04-03 N/A
Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitrary web script or HTML via the (1) act, (2) Members, (3) calendar, or (4) HID parameters.
CVE-2006-1288 1 Invision Power Services 1 Invision Power Board 2025-04-03 N/A
Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to (1) arrays of id/stamp pairs and (2) the keys in arrays of key/value pairs in ipsclass.php; (3) the topics variable in usercp.php; and the topicsread cookie in (4) topics.php, (5) search.php, and (6) forums.php.