CVE-2005-3549: Invision Power Services Invision Board

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by referencing the file in "Task PHP File To Run" field and selecting "Run Task Now".

Affected products

• Invision Power Services Invision Board: version 2.0.1 only

Published 2005-11-16. Last modified 2026-06-16.