CVE-2014-9239

Mô tả

Tham khảo

• community.invisionpower.com/blogs/entry/9704-active-security-exploit · Exploit
• community.invisionpower.com/blogs/entry/9705-ipboard-33x-34x-security-update · Patch
• seclists.org/fulldisclosure/2014/Nov/20

Lỗ hổng khác của invision power board

• CVE-2021-39250TRUNG BÌNH 5.4Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows stored XSS, with resultant code execution, because an uploade…
• CVE-2021-39249TRUNG BÌNH 6.1Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of uploaded files become …
• CVE-2009-5159TRUNG BÌNH 6.1Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment.
• CVE-2013-3725NGHIÊM TRỌNG 9.8Invision Power Board (IPB) through 3.x allows admin account takeover leading to code execution.
• CVE-2012-2226NGHIÊM TRỌNG 9.8Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information o…