Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP File To Run" field and selecting "Run Task Now".
References
Link | Resource |
---|---|
http://secunia.com/advisories/17443 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/40003 | |
http://www.securityfocus.com/archive/1/415798/30/0/threaded |
Configurations
Information
Published : 2005-11-15 23:42
Updated : 2018-10-19 08:37
NVD link : CVE-2005-3549
Mitre link : CVE-2005-3549
JSON object : View
CWE
Products Affected
invision_power_services
- invision_board