Vulnerability in Invision Power Services Board

CVE-2005-3549

Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP File To Run" field and selecting "Run Task Now".

EPSS: 0.019 (77.2th percentile) — read the EPSS interpretation.

Affected products

Invision_power_services Invision_board — versions 2.0.1
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)