4.3
CVSSv2

CVE-2008-6565

Published: 31/03/2009 Updated: 11/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via an IFRAME tag in the signature.

Vulnerable Product Search on Vulmon Subscribe to Product

invision power services invision power board 2.3

invision power services invision power board 1.0.3

invision power services invision power board 1.2

invision power services invision power board 2.0.3

invision power services invision power board 2.0.0

invision power services invision power board 2.1.5_2006-03-08

invision power services invision power board 2.1.5

invision power services invision power board 2.1_beta3

invision power services invision power board 2.1_beta2

invision power services invision power board 2.2.2

invision power services invision power board 2.2.1

invision power services invision power board

invision power services invision power board 1.3_final

invision power services invision power board 1.0.1

invision power services invision power board 2.0_pf1

invision power services invision power board 2.0_alpha3

invision power services invision power board 2.1.2

invision power services invision power board 2.0_pf2

invision power services invision power board 2.1

invision power services invision power board 2.1.5_2006-04-25

invision power services invision power board 2.1.x

invision power services invision power board 2.1.7

invision power services invision power board 1.3.1_final

invision power services invision power board 1.3

invision power services invision power board 1.1.2

invision power services invision power board 2.0

invision power services invision power board 2.0.1

invision power services invision power board 2.0.4

invision power services invision power board 2.0.x

invision power services invision power board 2.1.4

invision power services invision power board 2.1.3

invision power services invision power board 2.1_rc1

invision power services invision power board 2.2

invision power services invision power board 1.0

invision power services invision power board 1.1.1

invision power services invision power board 2.0_pdr3

invision power services invision power board 2.0.2

invision power services invision power board 2.1.1

invision power services invision power board 2.1.0

invision power services invision power board 2.1_beta5

invision power services invision power board 2.1_beta4

invision power services invision power board 2.1_alpha2

invision power services invision power board 2.1.6

Exploits

source: wwwsecurityfocuscom/bid/28466/info Invision Power Board (IPBoard) is prone to a security vulnerability that can aid attackers in social-engineering attacks Attacker-supplied script code could exploit vulnerabilities in the user's browser or give the user a false sense of security when visiting trusted web pages, which can aid ...