Search...

Invision Power Board module_table.php editorid Variable XSS

2007-05-30T13:18:47

ID OSVDB:35435
Type osvdb
Reporter OSVDB
Modified 2007-05-30T13:18:47

Description

No description provided by the source

References:

Vendor Specific News/Changelog Entry: http://forums.invisionpower.com/index.php?showtopic=235069 Secunia Advisory ID:25437 Related OSVDB ID: 35434 Related OSVDB ID: 35430 Related OSVDB ID: 35433 Related OSVDB ID: 35431 Related OSVDB ID: 35432 ISS X-Force ID: 34616 FrSIRT Advisory: ADV-2007-1993 CVE-2007-2963 Bugtraq ID: 24244

JSON Vulners Source

Initial Source

{"href": "https://vulners.com/osvdb/OSVDB:35435", "history": [], "id": "OSVDB:35435", "reporter": "OSVDB", "published": "2007-05-30T13:18:47", "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: http://forums.invisionpower.com/index.php?showtopic=235069\n[Secunia Advisory ID:25437](https://secuniaresearch.flexerasoftware.com/advisories/25437/)\n[Related OSVDB ID: 35434](https://vulners.com/osvdb/OSVDB:35434)\n[Related OSVDB ID: 35430](https://vulners.com/osvdb/OSVDB:35430)\n[Related OSVDB ID: 35433](https://vulners.com/osvdb/OSVDB:35433)\n[Related OSVDB ID: 35431](https://vulners.com/osvdb/OSVDB:35431)\n[Related OSVDB ID: 35432](https://vulners.com/osvdb/OSVDB:35432)\nISS X-Force ID: 34616\nFrSIRT Advisory: ADV-2007-1993\n[CVE-2007-2963](https://vulners.com/cve/CVE-2007-2963)\nBugtraq ID: 24244\n", "title": "Invision Power Board module_table.php editorid Variable XSS", "lastseen": "2017-04-28T13:20:31", "bulletinFamily": "software", "type": "osvdb", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "hash": "7667df4c8825d1e42816d0c2e702b1e9ce2e9ceba8d569e8dbe5d571f59e06c5", "references": [], "edition": 1, "cvelist": ["CVE-2007-2963"], "affectedSoftware": [], "viewCount": 0, "enchantments": {"vulnersScore": 7.5}, "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "9ae695028094c1a60482d13e788b1b70"}, {"key": "cvss", "hash": "6e9bdd2021503689a2ad9254c9cdf2b3"}, {"key": "description", "hash": "eec82c32ffefc210af6de5e2432318d7"}, {"key": "href", "hash": "71212b058f29225fd90b75e1e29b8ad5"}, {"key": "modified", "hash": "edfdf0aec9b6899c217af2321c7fc9ac"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "edfdf0aec9b6899c217af2321c7fc9ac"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "955b328dc7cd615c13af5464c9183464"}, {"key": "title", "hash": "e5e72276befc98de3978b9af5f01efed"}, {"key": "type", "hash": "1327ac71f7914948578f08c54f772b10"}], "objectVersion": "1.2", "modified": "2007-05-30T13:18:47"}

{"result": {"cve": [{"id": "CVE-2007-2963", "type": "cve", "title": "CVE-2007-2963", "description": "Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board (IPB or IP.Board) 2.2.2, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) module_bbcodeloader.php, (2) module_div.php, (3) module_email.php, (4) module_image.php, (5) module_link.php, or (6) the editorid parameter to module_table.php in jscripts/folder_rte_files/. NOTE: some details were obtained from third party sources.", "published": "2007-05-31T19:30:00", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-2963", "cvelist": ["CVE-2007-2963"], "lastseen": "2017-07-29T11:22:04"}], "osvdb": [{"id": "OSVDB:35433", "type": "osvdb", "title": "Invision Power Board module_image.php XSS", "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: http://forums.invisionpower.com/index.php?showtopic=235069\n[Secunia Advisory ID:25437](https://secuniaresearch.flexerasoftware.com/advisories/25437/)\n[Related OSVDB ID: 35434](https://vulners.com/osvdb/OSVDB:35434)\n[Related OSVDB ID: 35435](https://vulners.com/osvdb/OSVDB:35435)\n[Related OSVDB ID: 35430](https://vulners.com/osvdb/OSVDB:35430)\n[Related OSVDB ID: 35431](https://vulners.com/osvdb/OSVDB:35431)\n[Related OSVDB ID: 35432](https://vulners.com/osvdb/OSVDB:35432)\nISS X-Force ID: 34616\nFrSIRT Advisory: ADV-2007-1993\n[CVE-2007-2963](https://vulners.com/cve/CVE-2007-2963)\nBugtraq ID: 24244\n", "published": "2007-05-30T13:18:47", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://vulners.com/osvdb/OSVDB:35433", "cvelist": ["CVE-2007-2963"], "lastseen": "2017-04-28T13:20:31"}, {"id": "OSVDB:35434", "type": "osvdb", "title": "Invision Power Board module_link.php XSS", "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: http://forums.invisionpower.com/index.php?showtopic=235069\n[Secunia Advisory ID:25437](https://secuniaresearch.flexerasoftware.com/advisories/25437/)\n[Related OSVDB ID: 35435](https://vulners.com/osvdb/OSVDB:35435)\n[Related OSVDB ID: 35430](https://vulners.com/osvdb/OSVDB:35430)\n[Related OSVDB ID: 35433](https://vulners.com/osvdb/OSVDB:35433)\n[Related OSVDB ID: 35431](https://vulners.com/osvdb/OSVDB:35431)\n[Related OSVDB ID: 35432](https://vulners.com/osvdb/OSVDB:35432)\nISS X-Force ID: 34616\nFrSIRT Advisory: ADV-2007-1993\n[CVE-2007-2963](https://vulners.com/cve/CVE-2007-2963)\nBugtraq ID: 24244\n", "published": "2007-05-30T13:18:47", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://vulners.com/osvdb/OSVDB:35434", "cvelist": ["CVE-2007-2963"], "lastseen": "2017-04-28T13:20:31"}, {"id": "OSVDB:35431", "type": "osvdb", "title": "Invision Power Board module_div.php XSS", "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: http://forums.invisionpower.com/index.php?showtopic=235069\n[Secunia Advisory ID:25437](https://secuniaresearch.flexerasoftware.com/advisories/25437/)\n[Related OSVDB ID: 35434](https://vulners.com/osvdb/OSVDB:35434)\n[Related OSVDB ID: 35435](https://vulners.com/osvdb/OSVDB:35435)\n[Related OSVDB ID: 35430](https://vulners.com/osvdb/OSVDB:35430)\n[Related OSVDB ID: 35433](https://vulners.com/osvdb/OSVDB:35433)\n[Related OSVDB ID: 35432](https://vulners.com/osvdb/OSVDB:35432)\nISS X-Force ID: 34616\nFrSIRT Advisory: ADV-2007-1993\n[CVE-2007-2963](https://vulners.com/cve/CVE-2007-2963)\nBugtraq ID: 24244\n", "published": "2007-05-30T13:18:47", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://vulners.com/osvdb/OSVDB:35431", "cvelist": ["CVE-2007-2963"], "lastseen": "2017-04-28T13:20:31"}, {"id": "OSVDB:35430", "type": "osvdb", "title": "Invision Power Board module_bbcodeloader.php XSS", "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: http://forums.invisionpower.com/index.php?showtopic=235069\n[Secunia Advisory ID:25437](https://secuniaresearch.flexerasoftware.com/advisories/25437/)\n[Related OSVDB ID: 35434](https://vulners.com/osvdb/OSVDB:35434)\n[Related OSVDB ID: 35435](https://vulners.com/osvdb/OSVDB:35435)\n[Related OSVDB ID: 35433](https://vulners.com/osvdb/OSVDB:35433)\n[Related OSVDB ID: 35431](https://vulners.com/osvdb/OSVDB:35431)\n[Related OSVDB ID: 35432](https://vulners.com/osvdb/OSVDB:35432)\nISS X-Force ID: 34616\nFrSIRT Advisory: ADV-2007-1993\n[CVE-2007-2963](https://vulners.com/cve/CVE-2007-2963)\nBugtraq ID: 24244\n", "published": "2007-05-30T13:18:47", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://vulners.com/osvdb/OSVDB:35430", "cvelist": ["CVE-2007-2963"], "lastseen": "2017-04-28T13:20:31"}, {"id": "OSVDB:35432", "type": "osvdb", "title": "Invision Power Board module_email.php XSS", "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: http://forums.invisionpower.com/index.php?showtopic=235069\n[Secunia Advisory ID:25437](https://secuniaresearch.flexerasoftware.com/advisories/25437/)\n[Related OSVDB ID: 35434](https://vulners.com/osvdb/OSVDB:35434)\n[Related OSVDB ID: 35435](https://vulners.com/osvdb/OSVDB:35435)\n[Related OSVDB ID: 35430](https://vulners.com/osvdb/OSVDB:35430)\n[Related OSVDB ID: 35433](https://vulners.com/osvdb/OSVDB:35433)\n[Related OSVDB ID: 35431](https://vulners.com/osvdb/OSVDB:35431)\nISS X-Force ID: 34616\nFrSIRT Advisory: ADV-2007-1993\n[CVE-2007-2963](https://vulners.com/cve/CVE-2007-2963)\nBugtraq ID: 24244\n", "published": "2007-05-30T13:18:47", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://vulners.com/osvdb/OSVDB:35432", "cvelist": ["CVE-2007-2963"], "lastseen": "2017-04-28T13:20:31"}]}}