|
Invision Power Board Cross-Site Scripting and SQL Injection
|
|
Secunia Advisory:
|
SA9266
|
|
|
Release Date:
|
2003-07-15
|
|
Popularity:
|
7,995 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Cross Site Scripting
Manipulation of data
Exposure of sensitive information
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Invision Power Board 1.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
Two vulnerabilities have been reported in Invision Power Board (IPB), which can be exploited by malicious people to conduct Cross-Site Scripting attacks and SQL injection.
Missing input validation in "post.php" can be exploited by injecting arbitrary script code in [FLASH] tags. This can be executed in another user's browser session and may disclose sensitive information (eg. cookie-based authentication information) associated with the site running Invision Power Board or inclusion of malicious content, which the user thinks is part of the real website.
Missing input validation in "ipchat.php" can potentially be exploited by conducting SQL injection attacks. Successful exploitation allows manipulation of existing SQL queries, which may change database content or disclose sensitive information (see "Other References" for examples).
Solution:
Apply patch.
Patch for IPB 1.2:
http://www.invisionboard.com/downloads/chat.zip
Patch for IPB 1.1.*:
http://www.invisionboard.com/downloads/chat112.zip
Provided and/or discovered by:
Martin Eiszner
Original Advisory:
http://forums.invisionpower.com/index.php?showtopic=77376
Other References:
http://www.websec.org/adv/invision.txt.html
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
