CVE-2005-3549

Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP File To Run" field and selecting "Run Task Now".

Score

CVSS 2.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2005-11-16

Last modified

2024-08-07

Affected products

• Invision Board (Invision Power Services)

References

• http://secunia.com/advisories/17443
• http://www.securityfocus.com/archive/1/415798/30/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40003