IP.Board Add-on IP.Gallery 4.2.1 Cross Site Scripting

Exploit Title: IP.Board 3.3.0 Cross Site Scripting Date: 27.03.2012 Author: Sony and Flexxpoint Software Link: http://community.invisionpower.com/ Web Browser : Mozilla Firefox Blog Flexxpoint: http://flexxpoint.blogspot.com/ Blog Sony: http://st2tea.blogspot.com Site : http://insecurity.ro PoC:...

Invision Power Board IP.Board <= 3.1.3 Information Disclosure Vulnerability

IP.Board is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-3424

CVE-2010-3424 represents a Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board)

CVE-2010-3424: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/sources/classes/bbcode/custom/defaults.php in Invision Power Board IP.Board 3.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Invision Power Board 3.0.5 Calendar Application Script Insertion Vulnerability

No description provided by source. Credits ============ Discovered by: David Vieira-Kurz http://www.majorsecurity.info/penetrationstest.php Affected Products: ---------------------------- Invision Power Board 3.0.5 and prior Introduction ============ Invision Power Board is a widely used forums...

IP.Board 3.0.x Cross Site Scripting

Exploit Title: IP.Board 3.0.x XSS Date: 05/16/2010 Author: Cryptovirus http://de.crypt.in Software Link: http://community.invisionpower.com/ Version: 3.0.x Tested on: All Code : The following code, when put in a post, blog entry, comment, or PM, lets JavaScript run:...

IP.Board (IPB) 3.0.x Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================= IP.Board IPB 3.0.x Persistent XSS Vulnerability ================================================= Date: 05/14/2010 Author: Cryptovirus Software Link: http://community.invisionpower.com/ Version...

Invision Power Board 3.x SQL注入漏洞

CVE ID：CVE-2009-3974 IP.Board是一款流行的基于PHP的论坛程序。 IP.Board存在两个输入验证问题，恶意攻击者可以利用漏洞进行SQL注入攻击。 在用于SQL查询前部分输入缺少过滤，可导致注入任意SQL代码操作SQL查询，可泄漏敏感信息或操作数据库。 IP.Board Invision Power Board 3.x 2009.8.18之后IP.Board 3.0.2已经修复此漏洞，建议用户下载使用：...

CVE-2009-3974

Invision Power Board (IPB/IP.Board) 3.0.0–3.0.2 is vulnerable to multiple SQL injection flaws. The issues affect input handling for two parameters: (1) search_term in admin/applications/core/modules_public/search/search.php and (2) aid in admin/applications/core/modules_public/global/lostpass.php...

Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting / Full Path Disclosure

================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail : [email protected] Note: works on IE 6,7,8...

IP.Board Detection

Detection of IP.Board. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2008-4171

CVE-2008-4171 affects Invision Power Board (IPB) 2.2.x and 2.3.x, with a SQL injection in xmlout.php where the name parameter can be manipulated to execute arbitrary SQL commands. The NVD entry cites a remote attacker, with a base score of 7.5 (high) and impact on confidentiality, integrity, and ...

Invision Power Board (IP.Board) 2.3.5 - Multiple Vulnerabilities (2)

Invision Power Board IP.Board 2.3.5 - Multiple Vulnerabilities 2 !/usr/bin/php -q mhead; Gimme your args $this-pattack = $this-getp'attack', true; $this-pprox = $this-getp'proxhost'; $this-pproxa = $this-getp'proxauth'; $this-initglobal; Proxy params if $this-pprox $this-web-proxy$this-pprox; if...

CVE-2008-1359

Cross-site scripting XSS vulnerability in Invision Power Board IPB or IP.Board 2.3.4 before 2008-03-13 allows remote attackers to inject arbitrary web script or HTML via nested BBCodes, a different vector than CVE-2008-0913...

CVE-2008-1359

Technical details about CVE-2008-1359 are not provided in the connected documents. The material covers related CVEs (e.g., CVE-2008-0913) and generic IPB XSS context. Monitor for updates.

Cross site scripting

Cross-site scripting XSS vulnerability in Invision Power Board IPB or IP.Board 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context...

CVE-2008-0913

Cross-site scripting XSS vulnerability in Invision Power Board IPB or IP.Board 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context...

CVE-2008-0913

Cross-site scripting XSS vulnerability in Invision Power Board IPB or IP.Board 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context...

CVE-2008-0913

Invision Power Board (IPB/IP.Board) version 2.3.4 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context. The issue is documented across multiple sources (e.g., NVD and Red Hat CVE) with...

Invision Power Board (IP.Board) 2.1.7 - ACTIVE Cross-Site Scripting SQL Injection

Invision Power Board IP.Board 2.1.7 - ACTIVE Cross-Site Scripting SQL Injection ---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // /...