Every CVE Search/ Get API key

CVE-2003-1454

Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected,...

5.0 Medium

Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.

Exploit likelihood

1.22%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.

Record
CVE-2003-1454
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.

Record
CVE-2003-1454
Updated
2026-11-02
EUVDEUVD-2003-1444 No score

Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.

Record
EUVD-2003-1444
Updated
2026-11-03
GitHub AdvisoriesGHSA-2hm5-gw4v-jffr No score

Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected,...

Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access.

Record
GHSA-2hm5-gw4v-jffr
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-1454 is a medium vulnerability (CVSS 5.0) in Invision Power Services Board, published December 31, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.22%, the 68th percentile. No source names a fixed version.

References

MoveEnter Open