VulnerabilityModified
CVE-2005-1598
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.
HIGH 7.5EPSS 13.9%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 13.9%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 13.91% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- invision power services/invision board · invision power services/invision power board
- Source
- cve@mitre.org
References
- http://forums.invisionpower.com/index.php?showtopic=168016Patch
- http://marc.info/?l=bugtraq&m=111539908705851&w=2
- http://marc.info/?l=bugtraq&m=111712587206834&w=2
- http://secunia.com/advisories/15265
- http://securitytracker.com/id?1013907
- http://securitytracker.com/id?1014499
- http://www.gulftech.org/?node=research&article_id=00073-05052005Exploit, Patch
- http://www.osvdb.org/16297
- http://www.securiteam.com/exploits/5GP0E2KFQQ.html
- http://www.securityfocus.com/bid/13529
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20446
- https://www.exploit-db.com/exploits/1013
- http://forums.invisionpower.com/index.php?showtopic=168016Patch
- http://marc.info/?l=bugtraq&m=111539908705851&w=2
- http://marc.info/?l=bugtraq&m=111712587206834&w=2
- http://secunia.com/advisories/15265
- http://securitytracker.com/id?1013907
- http://securitytracker.com/id?1014499
- http://www.gulftech.org/?node=research&article_id=00073-05052005Exploit, Patch
- http://www.osvdb.org/16297
- http://www.securiteam.com/exploits/5GP0E2KFQQ.html
- http://www.securityfocus.com/bid/13529
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20446
- https://www.exploit-db.com/exploits/1013
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.