NetSight
IP …
critical10.0

CVE-2004-0338

SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter.

Impact

SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter.

Affected products

VendorProductAffected versions
Invision Power ServicesInvision Board
Versions 1.0, 1.0.1, 1.1.1, 1.1.2, 1.2, 1.3

References