← Vulnerability feed

Vulnerability record · CVE-2005-1070 · published 11 April 2005

CVE-2005-1070: Invision power services invision board vulnerability

IInvision Power Services · Invision Board

SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter.

7.5 CVSS 2.0 High EPSS 1.1% · top 36.4%
7.5CVSS 2.0 base score
1.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/archive/1/395515 Vendor Advisory
http://www.securityfocus.com/bid/13097 Vendor Advisory
http://www.securitytracker.com/alerts/2005/Apr/1013676.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20059
http://www.securityfocus.com/archive/1/395515 Vendor Advisory
http://www.securityfocus.com/bid/13097 Vendor Advisory
http://www.securitytracker.com/alerts/2005/Apr/1013676.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20059

Track CVE-2005-1070 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0338Invision power services invision board vulnerabilitySQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter.EPSS 2.4%7.5CVE-2006-3544Invision power services invision board vulnerabilityMultiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE …EPSS 1.4%7.5CVE-2005-1598Invision power services invision board vulnerabilitySQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted c…EPSS 14%7.5CVE-2004-1531Invision power services invision board vulnerabilitySQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands v…EPSS 1.3%7.5CVE-2004-1785Invision power services invision board vulnerabilitySQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m paramete…EPSS 1.4%6.8CVE-2004-0359Invision power services invision board vulnerabilityCross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other…EPSS 5.6%6.5CVE-2005-3549Invision power services invision board vulnerabilityDirect code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by refere…EPSS 1.9%5.0CVE-2006-2061Invision power services invision board vulnerabilitySQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to exec…EPSS 1.6%

Source: NIST National Vulnerability Database (record CVE-2005-1070), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.