Lucene search

MitreCVE-2005-1443

HistoryMay 03, 2005 - 4:00 a.m.

CVE-2005-1443

2005-05-0304:00:00

mitre

web.nvd.nist.gov

xss

invision power board

ipb

web security

remote attack

vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.9

Confidence

High

EPSS

0.011

Percentile

84.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitrary web script or HTML via the (1) act, (2) Members, (3) calendar, or (4) HID parameters.

Affected configurations

Nvd

Node

invision_power_servicesinvision_power_boardMatch2.0.3

invision_power_servicesinvision_power_boardMatch2.1_alpha2

VendorProductVersionCPE
invision_power_servicesinvision_power_board2.0.3cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:*:*:*:*:*:*:*
invision_power_servicesinvision_power_board2.1_alpha2cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
invision_power_services	invision_power_board	2.0.3	cpe:2.3:a:invision_power_services:invision_power_board:2.0.3:::::::*
invision_power_services	invision_power_board	2.1_alpha2	cpe:2.3:a:invision_power_services:invision_power_board:2.1_alpha2:::::::*

References

securitytracker.com/id?1013863

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.9

Confidence

High

EPSS

0.011

Percentile

84.7%

JSON

Related for CVE-2005-1443