Vulnerabilities (CVE)

Filtered by vendor Invision Power Services Subscribe
Filtered by product Invision Power Board
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-2279 1 Invision Power Services 1 Invision Power Board 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other users via the pop parameter in a chat action to index.php.
CVE-2006-1287 1 Invision Power Services 1 Invision Power Board 2025-04-03 5.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.0.4 and 2.1.4 before 20060130 allows remote attackers to steal cookies and probably conduct other activities when the victim is using Internet Explorer.