4.3

CVE-2007-2963

Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board (IPB or IP.Board) 2.2.2, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) module_bbcodeloader.php, (2) module_div.php, (3) module_email.php, (4) module_image.php, (5) module_link.php, or (6) the editorid parameter to module_table.php in jscripts/folder_rte_files/.  NOTE: some details were obtained from third party sources.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.28% 0.808
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://forums.invisionpower.com/index.php?showtopic=235069
Patch
http://osvdb.org/35430
http://osvdb.org/35431
http://osvdb.org/35432
http://osvdb.org/35433
http://osvdb.org/35434
http://osvdb.org/35435
http://secunia.com/advisories/25437
Patch
Vendor Advisory
http://www.securityfocus.com/bid/24244
Patch
http://www.vupen.com/english/advisories/2007/1993
https://exchange.xforce.ibmcloud.com/vulnerabilities/34616