Vulnerabilities > CVE-2004-1785 - Unspecified vulnerability in Invision Power Services Invision Board

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
invision-power-services
NVD
Published: 2004-01-03
Updated: 2024-11-20

Summary

SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable.

Vulnerable Configurations

Part Description Count
Application
Invision_Power_Services
6

References