CVE-2009-5159

概要

参考情報

• community.invisionpower.com/topic/300051-invision-power-board-305-released · Broken Link
• packetstormsecurity.com/files/83624/Invision-Power-Board-3.0.4-Cross-Site-Scripting.html · Exploit
• exploit-db.com/exploits/33394 · Exploit
• securityfocus.com/bid/37263/info · Third Party Advisory

invision power board のその他の脆弱性

• CVE-2021-39250中 5.4Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows stored XSS, with resultant code execution, because an uploade…
• CVE-2021-39249中 6.1Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of uploaded files become …
• CVE-2013-3725緊急 9.8Invision Power Board (IPB) through 3.x allows admin account takeover leading to code execution.
• CVE-2012-2226緊急 9.8Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information o…
• CVE-2019-8278中 6.1Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.