cve-2005-3547
Vulnerability from cvelistv5
Published
2005-11-16 07:37
Modified
2024-08-07 23:17
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields.
References
cve@mitre.orghttp://benji.redkod.org/audits/ipb.2.1.pdf
cve@mitre.orghttp://osvdb.org/20516
cve@mitre.orghttp://osvdb.org/20517
cve@mitre.orghttp://osvdb.org/20518
cve@mitre.orghttp://osvdb.org/20519
cve@mitre.orghttp://osvdb.org/20520
cve@mitre.orghttp://osvdb.org/20521
cve@mitre.orghttp://osvdb.org/20522
cve@mitre.orghttp://secunia.com/advisories/17443Patch, Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/archive/1/415801/30/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/15344
cve@mitre.orghttp://www.securityfocus.com/bid/15345
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/22999
af854a3a-2127-422b-91ae-364da2661108http://benji.redkod.org/audits/ipb.2.1.pdf
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/20516
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/20517
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/20518
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/20519
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/20520
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/20521
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/20522
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/17443Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/415801/30/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/15344
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/15345
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/22999
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:17:23.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20051104 Failles dans Invision Power Board 2.1 [xss]",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/415801/30/0/threaded"
          },
          {
            "name": "invision-powerboard-admin-xss(22999)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22999"
          },
          {
            "name": "20520",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20520"
          },
          {
            "name": "20519",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20519"
          },
          {
            "name": "15344",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15344"
          },
          {
            "name": "17443",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17443"
          },
          {
            "name": "20518",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20518"
          },
          {
            "name": "20516",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20516"
          },
          {
            "name": "20517",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20517"
          },
          {
            "name": "15345",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15345"
          },
          {
            "name": "20521",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20521"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://benji.redkod.org/audits/ipb.2.1.pdf"
          },
          {
            "name": "20522",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20522"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20051104 Failles dans Invision Power Board 2.1 [xss]",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/415801/30/0/threaded"
        },
        {
          "name": "invision-powerboard-admin-xss(22999)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22999"
        },
        {
          "name": "20520",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20520"
        },
        {
          "name": "20519",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20519"
        },
        {
          "name": "15344",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15344"
        },
        {
          "name": "17443",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17443"
        },
        {
          "name": "20518",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20518"
        },
        {
          "name": "20516",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20516"
        },
        {
          "name": "20517",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20517"
        },
        {
          "name": "15345",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15345"
        },
        {
          "name": "20521",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20521"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://benji.redkod.org/audits/ipb.2.1.pdf"
        },
        {
          "name": "20522",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20522"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3547",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20051104 Failles dans Invision Power Board 2.1 [xss]",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/415801/30/0/threaded"
            },
            {
              "name": "invision-powerboard-admin-xss(22999)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22999"
            },
            {
              "name": "20520",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20520"
            },
            {
              "name": "20519",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20519"
            },
            {
              "name": "15344",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15344"
            },
            {
              "name": "17443",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17443"
            },
            {
              "name": "20518",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20518"
            },
            {
              "name": "20516",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20516"
            },
            {
              "name": "20517",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20517"
            },
            {
              "name": "15345",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15345"
            },
            {
              "name": "20521",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20521"
            },
            {
              "name": "http://benji.redkod.org/audits/ipb.2.1.pdf",
              "refsource": "MISC",
              "url": "http://benji.redkod.org/audits/ipb.2.1.pdf"
            },
            {
              "name": "20522",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20522"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3547",
    "datePublished": "2005-11-16T07:37:00",
    "dateReserved": "2005-11-16T00:00:00",
    "dateUpdated": "2024-08-07T23:17:23.263Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2005-3547\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2005-11-16T07:42:00.000\",\"lastModified\":\"2024-11-21T00:02:09.210\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Invision Power Board 2.1 permite a atacantes remotos inyectar web scritp o HTML de su elecci\u00f3n mediante los par\u00e1metros (1) adsess, (2) name y (3) description en admin.php, y (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, y otros m\u00faltiples campos de entrada.\\r\\n\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:invision_power_services:invision_board:2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05FA7E1F-D9D2-419F-A9DE-7BE4253F897E\"}]}]}],\"references\":[{\"url\":\"http://benji.redkod.org/audits/ipb.2.1.pdf\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20516\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20517\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20518\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20519\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20520\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20521\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20522\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/17443\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/415801/30/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/15344\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/15345\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/22999\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://benji.redkod.org/audits/ipb.2.1.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20516\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20517\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20518\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20519\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20520\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20521\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20522\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/17443\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/415801/30/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/15344\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/15345\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/22999\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.