Unrated severityNVD Advisory· Published Jan 3, 2004· Updated Jun 16, 2026
CVE-2004-1785
CVE-2004-1785
Description
SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable.
Affected products
7cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*
- (no CPE)range: =1.3
Patches
Vulnerability mechanics
References
6- secunia.com/advisories/10530nvdPatchVendor Advisory
- www.osvdb.org/3319nvdPatchVendor Advisory
- www.securityfocus.com/bid/9353nvdPatchVendor Advisory
- www.securityfocus.com/archive/1/348821nvdExploitVendor Advisory
- forums.invisionpower.com/index.phpnvd
- www.securitytracker.com/idnvd
News mentions
0No linked articles in our index yet.