CVE-2013-3725

Description

References

• john-jean.com/blog/securite-informatique/ipb-invision-power-board-all-versions-1-x-2-x-3-x-admin-account-takeover-leading-to-code-execution-742 · Broken Link

Autres vulnérabilités de invision power board

• CVE-2021-39250MOYENNE 5.4Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows stored XSS, with resultant code execution, because an uploade…
• CVE-2021-39249MOYENNE 6.1Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of uploaded files become …
• CVE-2009-5159MOYENNE 6.1Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment.
• CVE-2012-2226CRITIQUE 9.8Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information o…
• CVE-2019-8278MOYENNE 6.1Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.