Test ID:	1.3.6.1.4.1.25623.1.0.11977
Category:	Web application abuses
Title:	Invision Power Board Calendar SQL Injection Vulnerability
Summary:	The remote host is running Invision Power Board - a CGI suite designed to; set up a bulletin board system on the remote web server.;; A vulnerability has been discovered in the sources/calendar.php file that allows unauthorized users to inject SQL; commands.
Description:	Summary: The remote host is running Invision Power Board - a CGI suite designed to set up a bulletin board system on the remote web server. A vulnerability has been discovered in the sources/calendar.php file that allows unauthorized users to inject SQL commands. Vulnerability Insight: An attacker may use this flaw to gain the control of the remote database Solution: Upgrade to the latest version of this software. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1785 BugTraq ID: 9353 http://www.securityfocus.com/bid/9353 Bugtraq: 20040103 [SCSA-025] Invision Power Board SQL Injection Vulnerability (Google Search) http://www.securityfocus.com/archive/1/348821 http://www.osvdb.org/3319 http://www.securitytracker.com/id?1008589 http://secunia.com/advisories/10530
Copyright	Copyright (C) 2003 Noam Rathaus

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.