RSS   Podatności dla 'Invision community blog'   RSS

2006-12-07
 
CVE-2006-6369

CWE-Other
 
 
SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality.

 
2006-05-09
 
CVE-2006-2251

 
 
SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.

 
2005-06-09
 
CVE-2005-1946

 
 
Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to an editentry, replyentry, or editcomment action, or (2) the mid parameter to an aboutme action.

 
 
CVE-2005-1945

 
 
Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data.

 
2005-05-02
 
CVE-2005-0217

 
 
SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter.

 

 >>> Vendor: Invision power services 5 Produkty
Invision board
Invision power board
Invision gallery
Invision power top site list
Invision community blog

Copyright 2024, cxsecurity.com

 

Back to Top