|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> CGI abuses >> Invision Power Board < 2.0.4 Multiple Vulnerabilities Vulnerability Assessment Details
|
Invision Power Board < 2.0.4 Multiple Vulnerabilities |
||
Checks for multiple vulnerabilities in Invision Power Board < 2.0.4 Detailed Explanation for this Vulnerability Assessment Summary : The remote web server contains a PHP application that is vulnerable to multiple attacks. Description : According to its banner, the version of Invision Power Board on the remote host suffers from multiple vulnerabilities : - SQL Injection Vulnerability The application fails to sanitize user-input supplied through the 'pass_hash' cookie in the 'sources/login.php' script, which can be exploited to affect database queries, potentially revealing sensitive information. - Multiple Cross-Site Scripting Vulnerabilities A possible hacker can pass arbitrary HTML and script code through the 'highlite' parameter of the 'sources/search.php' and 'sources/topics.php' scripts. See also : http://www.gulftech.org/?node=research&article_id=00073-05052005 http://archives.neohapsis.com/archives/bugtraq/2005-05/0071.html http://archives.neohapsis.com/archives/bugtraq/2005-07/0257.html Solution : Upgrade to Invision Power Board 2.0.4 or later. Network Security Threat Level: Medium / CVSS Base Score : 5 (AV:R/AC:L/Au:NR/C:P/A:N/I:P/B:N) Networks Security ID: 13529, 13532, 13534, 13375 Vulnerability Assessment Copyright: This script is Copyright (C) 2005-2006 Tenable Network Security |
||
Cables, Connectors |
Extron RGB-160XI Analog Computer Video 60-378-01
$187.06
The analog thing modern open source, educational, low-cost analog computer
$800.00
NEW Aquarius+ Mini 8Bit Retro Computer System - Assembled PCB ONLY
$99.00
IBM Modem Saver Phone Line Tester
$7.99
FULLY RECAPPED MACINTOSH CLASSIC II 2 VINTAGE MAC APPLE COMPUTER NEW BATT WORKS
$899.00
Landen Computer. Circa 1898. the Rapid Computer Company. With Original Case.
$425.00
Apple Macintosh SE Completely Recapped #M5011 4Mbyte RAM, 800K Drive, 20MB HD
$500.00
Apple Macintosh Plus Completely Recapped #M0001A 4MB
$499.00
Macintosh Classic/Classic II Analog Board Computer 630-0395 New
$278.00
Analog Computing The #1 Magazine Atari Computer Owners 1985-86 #28 #32 #37 #42
$9.99
|
||
No Discussions have been posted on this vulnerability. |