PT-2005-1914 · Invision · Invision Power Board

Publicado

2005-03-26

·

Atualizado

2008-09-05

·

CVE-2005-0886

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Invision Power Board versions 2.0.2 and earlier
Description The issue allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request, which is a cross-site scripting (XSS) vulnerability.
Recommendations For versions 2.0.2 and earlier, update to a version later than 2.0.2 to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2005-0886

Produtos afetados

Invision Power Board