4.3
CVSSv2

CVE-2006-3197

Published: 23/06/2006 Updated: 20/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a POST that contains hexadecimal-encoded HTML.

Vulnerable Product Search on Vulmon Subscribe to Product

invision power services invision power board 2.1 beta2

invision power services invision power board 2.1 rc1

invision power services invision power board 2.1.1

invision power services invision power board 2.1.6

invision power services invision power board 2.1 alpha2

invision power services invision power board 2.1.2

invision power services invision power board 2.1.3

invision power services invision power board 2.1 beta5

invision power services invision power board 2.1.0

invision power services invision power board 2.1.5

invision power services invision power board 2.1 beta4

invision power services invision power board 2.1

invision power services invision power board 2.1 beta3

invision power services invision power board 2.1.4