PT-2006-3445 · Invision · Invision Power Board
Steven M. Christey
·
Publicado
2006-05-20
·
Atualizado
2017-07-20
·
CVE-2006-2498
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Invision Power Board (IPB) versions prior to 2.1.6
Description
The issue allows remote attackers to execute arbitrary PHP script. This can be achieved through attack vectors involving the
post icon variable in the classes/post/class post.php file and the df value in the action public/moderate.php file.Recommendations
For Invision Power Board (IPB) versions prior to 2.1.6, update to version 2.1.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the classes/post/class post.php and action public/moderate.php files to minimize the risk of exploitation. Avoid using the
post icon variable and the df value in the affected files until the issue is resolved.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Invision Power Board