📦

invision_community_blog

Vendor: invision_power_services

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 0 Remote Access
Total CVEs 11 Total Indexed
Avg. EPSS 1.24% Exploit Prob.
Latest CVE CVE-2006-6369 Dec 07

Security Vulnerability Index

Page 1 / 2
7.5 CVSS
CVE-2006-6369
Exploit Found

SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality.

EPSS: 1.08%
6.4 CVSS
CVE-2006-2251

SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.

EPSS: 1.37%
4.3 CVSS
CVE-2005-1945

Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data.

EPSS: 1.21%
7.5 CVSS
CVE-2005-1946

Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to an editentry, replyentry, or editcomment action, or (2) the mid parameter to an aboutme action.

EPSS: 1.28%
7.5 CVSS
CVE-2005-0217

SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter.

EPSS: 1.28%