Description
Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter.
Exploits (1)
References (9)
Core 9
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/15265
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/16298
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/13534
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111539908705851&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1013907
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/0487
Patch x_refsource_confirm
http://forums.invisionpower.com/index.php?showtopic=168016
Patch x_refsource_misc
http://www.gulftech.org/?node=research&article_id=00073-05052005
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/20445
Scores
EPSS
0.0105
EPSS Percentile
77.7%
Details
Status
published
Products (9)
invision_power_services/invision_board
1.0
invision_power_services/invision_board
1.0.1
invision_power_services/invision_board
1.1.1
invision_power_services/invision_board
1.1.2
invision_power_services/invision_board
1.2
invision_power_services/invision_board
1.3
invision_power_services/invision_board
2.0_alpha_3
invision_power_services/invision_board
2.0_pdr3
invision_power_services/invision_power_board
2.0.3
Published
May 16, 2005
Tracked Since
Feb 18, 2026