Back

CVE-2005-3549

Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP File To Run" field and selecting "Run Task Now".

Published: Nov 16, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
invision_power_services invision_board 2.0.1

GitHub Security Advisory GHSA-3wv8-g2rv-3w65

Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited...

Risk Scores

CVSS Score 6.5 / 10
EPSS Score 1.87%

Top 22% most likely to be exploited

Threat Score 26.6 / 100

Data Sources

NVD EPSS GitHub