20050805 ipb Css bug(now public)mailing list
http://marc.info/?l=bugtraq&m=112327712614854&w=2 CVE-2005-2542
Invision Power Board (IP.Board) 1.0.3 - Attached File Cross-Site Scripting
Record summary
CVE-2005-2542 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, which is automatically downloaded and processed as HTML.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBInvision Power Board (IP.Board) 1.0.3 - Attached File Cross-Site ScriptingExploitDB exploitby V[i]RuSNot analyzed1 file
References
416348Third-party advisory
http://secunia.com/advisories/16348 14492vdb entry
http://www.securityfocus.com/bid/14492 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-2542