CVE-2006-3197
mediumPriorität · verfolgen · 17EPSS 0.013 · 70. PerzentilEUUSEPSS · bewertet 2026-10-28
Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a POST that contains hexadecimal-encoded HTML.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.7–4.3
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (15)
Betroffene Produkte und Versionsbereiche.
- invision power services invision power board= 2.1nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1.0nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1.1nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1.2nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1.3nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1.4nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1.5nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1.6nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1_alpha2nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1_beta2nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1_beta3nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1_beta4nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1_beta5nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
- invision power services invision power board= 2.1_rc1nvdUScpe:2.3:a:invision_power_services:invision_power_board:*:*:*:*:*:*:*:*
auch bekannt als (2)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (14)
Externe Belege — Patches, Meldungen, Analysen.
- http://forums.invisionpower.com/index.php?showtopic=219126enisa_euvd
- http://secunia.com/advisories/20772enisa_euvd
- http://securityreason.com/securityalert/596enisa_euvd
- http://www.osvdb.org/26747enisa_euvd
- http://www.securityfocus.com/bid/18571enisa_euvd
- http://www.vupen.com/english/advisories/2006/2481enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27701enisa_euvd
- http://forums.invisionpower.com/index.php?showtopic=219126Patchnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan