Unrated severityNVD Advisory· Published Jan 3, 2004· Updated Apr 16, 2026
CVE-2004-1785
CVE-2004-1785
Description
SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable.
Affected products
6cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- secunia.com/advisories/10530nvdPatchVendor Advisory
- www.osvdb.org/3319nvdPatchVendor Advisory
- www.securityfocus.com/bid/9353nvdPatchVendor Advisory
- www.securityfocus.com/archive/1/348821nvdExploitVendor Advisory
- forums.invisionpower.com/index.phpnvd
- www.securitytracker.com/idnvd
News mentions
0No linked articles in our index yet.