CVEvulnerability
CVE-2005-3549
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-11-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Description
Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP File To Run" field and selecting "Run Task Now".
Affected configurations
• invision power services invision board 2.0.1
References
- http://secunia.com/advisories/17443 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/415798/30/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40003 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/17443 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/415798/30/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40003 exchange.xforce.ibmcloud.com