CVEvulnerability
CVE-2005-3547
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-11-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields.
Affected configurations
• invision power services invision board 2.1
References
- http://benji.redkod.org/audits/ipb.2.1.pdf benji.redkod.org
- http://osvdb.org/20516 osvdb.org
- http://osvdb.org/20517 osvdb.org
- http://osvdb.org/20518 osvdb.org
- http://osvdb.org/20519 osvdb.org
- http://osvdb.org/20520 osvdb.org
- http://osvdb.org/20521 osvdb.org
- http://osvdb.org/20522 osvdb.org
- http://secunia.com/advisories/17443 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/415801/30/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15344 www.securityfocus.com
- http://www.securityfocus.com/bid/15345 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22999 exchange.xforce.ibmcloud.com
- http://benji.redkod.org/audits/ipb.2.1.pdf benji.redkod.org
- http://osvdb.org/20516 osvdb.org
- http://osvdb.org/20517 osvdb.org
- http://osvdb.org/20518 osvdb.org
- http://osvdb.org/20519 osvdb.org
- http://osvdb.org/20520 osvdb.org
- http://osvdb.org/20521 osvdb.org
- http://osvdb.org/20522 osvdb.org
- http://secunia.com/advisories/17443 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/415801/30/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15344 www.securityfocus.com
- http://www.securityfocus.com/bid/15345 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22999 exchange.xforce.ibmcloud.com