CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-1598

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.078

EPSS Ranking 91.5%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2005-1598

Invision Power Services » Invision Board » Version: 1.0

cpe:2.3:a:invision_power_services:invision_board:1.0
Invision Power Services » Invision Board » Version: 1.0.1

cpe:2.3:a:invision_power_services:invision_board:1.0.1
Invision Power Services » Invision Board » Version: 1.1.1

cpe:2.3:a:invision_power_services:invision_board:1.1.1
Invision Power Services » Invision Board » Version: 1.1.2

cpe:2.3:a:invision_power_services:invision_board:1.1.2
Invision Power Services » Invision Board » Version: 1.2

cpe:2.3:a:invision_power_services:invision_board:1.2
Invision Power Services » Invision Board » Version: 1.3

cpe:2.3:a:invision_power_services:invision_board:1.3
Invision Power Services » Invision Board » Version: 2.0_alpha_3

cpe:2.3:a:invision_power_services:invision_board:2.0_alpha_3
Invision Power Services » Invision Board » Version: 2.0_pdr3

cpe:2.3:a:invision_power_services:invision_board:2.0_pdr3
Invision Power Services » Invision Power Board » Version: 2.0.3

cpe:2.3:a:invision_power_services:invision_power_board:2.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-1598

Products

Pricing

Contact Us