Back
CVE-2004-0338
SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter.
Published: Nov 23, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (8)
| Vendor | Product | Version |
|---|---|---|
| invision_power_services | invision_board | 1.0 |
| invision_power_services | invision_board | 1.0.1 |
| invision_power_services | invision_board | 1.1.1 |
| invision_power_services | invision_board | 1.1.2 |
| invision_power_services | invision_board | 1.2 |
| invision_power_services | invision_board | 1.3 |
| invision_power_services | invision_board | 2.0_alpha_3 |
| invision_power_services | invision_board | 2.0_pdr3 |
GitHub Security Advisory GHSA-p4jh-q59v-v76c
SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to...
References (6)
Risk Scores
CVSS Score
10.0 / 10
EPSS Score
2.36%
Top 18% most likely to be exploited
Threat Score
40.7 / 100
Data Sources
NVD
EPSS
GitHub