CVE-2004-0338 SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter.
HighCVSS 10.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| invision power services invision board | = 1.0 | No fix listed |
| invision power services invision board | = 1.0.1 | No fix listed |
| invision power services invision board | = 1.1.1 | No fix listed |
| invision power services invision board | = 1.1.2 | No fix listed |
| invision power services invision board | = 1.2 | No fix listed |
| invision power services invision board | = 1.3 | No fix listed |
| invision power services invision board | = 2.0_alpha_3 | No fix listed |
| invision power services invision board | = 2.0_pdr3 | No fix listed |
References
- 20040228 Invision Power Board SQL injection! mailing-list
- 9766 vdb-entry
- invision-search-sql-injection(15343) vdb-entry