CVE-2005-1597 json
Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remot…
published 2005-05-16 21 y ago modified 2026-06-16 4 mo ago also EUVD-2005-1600
- cvss
- 4.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.4%
- EPSS 2.4% chance of exploitation in 30 days, percentile 83%
- public exploits
- 1
- Exploit-DB
Summary
Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter.
Patch / fix
Timeline
- Published
- First public exploit (EDB-43824)
Exploit prediction
2.38% chance of exploitation in the next 30 days, higher than 83% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-43824 Invision Power Board (IP.Board) < 2.0.3 - Multiple Vulnerabilities webapps, 2015-05-05
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
References
-
forums.invisionpower.com
/index.php?showtopic=168016
patch
-
gulftech.org
/?node=research&article_id=00073-05052005
patch
-
secunia.com
/advisories/15265
third-party-advisory
-
osvdb.org
/16298
vdb-entry
-
securityfocus.com
/bid/13534
vdb-entry
-
marc.info
/?l=bugtraq&m=111539908705851&w=2
mailing-list
-
securitytracker.com
/id?1013907
vdb-entry
-
vupen.com
/english/advisories/2005/0487
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/20445
vdb-entry
Sources
- CVE List CVE-2005-1597
- NVD CVE-2005-1597
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.