Lucene search
HistoryAug 10, 2005 - 4:00 a.m.
CVE-2005-2542
ipb
remote code injection
html injection
cve-2005-2542
nvd
6.9 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.014 Low
EPSS
Percentile
86.3%
Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, which is automatically downloaded and processed as HTML.
Affected configurations
Node
invision_power_servicesinvision_boardMatch2.0
ORinvision_power_servicesinvision_boardMatch2.0.1
ORinvision_power_servicesinvision_boardMatch2.0.2
ORinvision_power_servicesinvision_boardMatch2.0.3
ORinvision_power_servicesinvision_boardMatch2.0.4
ORinvision_power_servicesinvision_boardMatch2.0_alpha_3
ORinvision_power_servicesinvision_boardMatch2.0_pdr3
ORinvision_power_servicesinvision_boardMatch2.0_pf1
ORinvision_power_servicesinvision_boardMatch2.0_pf2
ORinvision_power_servicesinvision_boardMatch2.1_alpha2
6.9 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.014 Low
EPSS
Percentile
86.3%
Related for CVE-2005-2542