Vulnerability in Invision Power Services Community Blog
CVE-2005-1946
Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to an editentry, replyentry, or editcomment action, or (2) the mid parameter to an aboutme action.
EPSS: 0.013 (67.0th percentile) — read the EPSS interpretation.
Affected products
- Invision_power_services Invision_community_blog — versions 1.0, 1.1
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)