benji.redkod.org
http://benji.redkod.org/audits/ipb.2.1.pdf CVE-2005-3547
Invision Power Board (IP.Board) 2.1 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities
Record summary
CVE-2005-3547 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBInvision Power Board (IP.Board) 2.1 - 'admin.php' Multiple Cross-Site Scripting VulnerabilitiesExploitDB exploitby benjilenoobNot analyzed1 file
References
Showing 12 of 1420516vdb entry
http://osvdb.org/20516 20517vdb entry
http://osvdb.org/20517 20518vdb entry
http://osvdb.org/20518 20519vdb entry
http://osvdb.org/20519 20520vdb entry
http://osvdb.org/20520 20521vdb entry
http://osvdb.org/20521 20522vdb entry
http://osvdb.org/20522 17443Third-party advisory
http://secunia.com/advisories/17443 20051104 Failles dans Invision Power Board 2.1 [xss]mailing list
http://www.securityfocus.com/archive/1/415801/30/0/threaded 15344vdb entry
http://www.securityfocus.com/bid/15344 15345vdb entry
http://www.securityfocus.com/bid/15345