CVEvulnerability
CVE-2007-3219
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:C/A:N
Description
Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's profile data, such as an AIM screen name or Yahoo! identity.
Affected configurations
• invision power services invision power board 2.2
• invision power services invision power board 2.2.1
• invision power services invision power board 2.2.2
References
- http://forums.invisionpower.com/index.php?showtopic=235316 forums.invisionpower.com
- http://secunia.com/advisories/25637 Patch, Vendor Advisory
- http://www.osvdb.org/35436 www.osvdb.org
- http://www.securityfocus.com/bid/24442 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2160 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34841 exchange.xforce.ibmcloud.com
- http://forums.invisionpower.com/index.php?showtopic=235316 forums.invisionpower.com
- http://secunia.com/advisories/25637 Patch, Vendor Advisory
- http://www.osvdb.org/35436 www.osvdb.org
- http://www.securityfocus.com/bid/24442 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2160 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34841 exchange.xforce.ibmcloud.com