CVE-2005-1948

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-06-09 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment action or (2) the rating parameter when voting on a photo.

Affected products

Invision Power Services Invision Gallery: 1.0.1, 1.3

References

http://marc.info/?l=bugtraq&m=111834146710329&w=2
http://www.gulftech.org/?node=research&article_id=00079-06092005
http://www.securityfocus.com/bid/13907
http://marc.info/?l=bugtraq&m=111834146710329&w=2
http://www.gulftech.org/?node=research&article_id=00079-06092005
http://www.securityfocus.com/bid/13907

Get alerted when CVE-2005-1948 or the next vulnerability affects your stack