Lucene search

[email protected]CVE-2007-2349

HistoryApr 30, 2007 - 10:19 p.m.

CVE-2007-2349

2007-04-3022:19:00

[email protected]

web.nvd.nist.gov

ip.board

xss

vulnerability

code injection

images

pdfs

5.7 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

65.9%

JSON

Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board) 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted images or PDF files.

Affected configurations

NVD

Node

invision_power_servicesinvision_power_boardMatch2.1

invision_power_servicesinvision_power_boardMatch2.2

CPENameOperatorVersion
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1
invision_power_services:invision_power_boardinvision power services invision power boardeq2.2

CPE	Name	Operator	Version
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1
invision_power_services:invision_power_board	invision power services invision power board	eq	2.2

References

forums.invisionpower.com/index.php?showtopic=234377

osvdb.org/35427

secunia.com/advisories/25021

www.vupen.com/english/advisories/2007/1558

exchange.xforce.ibmcloud.com/vulnerabilities/33942

5.7 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

65.9%

JSON

Related for CVE-2007-2349

nvd1 cvelist1 prion1