NVD

Id
57002  
Name
CVE-2007-4912  
Description
Cross-site scripting (XSS) vulnerability in ips_kernel/class_ajax.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to inject arbitrary web script or HTML into user profile fields via unspecified vectors related to character sets other than iso-8859-1 or utf-8.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-09-17  
Modified Date
2008-09-05  
Seq
2007-4912  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290957 57002 CVE-2007-4912 http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870  View
290958 57002 CVE-2007-4912 http://forums.invisionpower.com/index.php?showtopic=237075  View
290959 57002 CVE-2007-4912 25656  View
290960 57002 CVE-2007-4912 ipb-profile-xss(36589)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55695 JVNDB-2007-004387 IP.Board の ips_kernel/class_ajax.php におけるクロスサイトスクリプティングの脆弱性 Invision Power Board (IPB または IP.Board) の ips_kernel/class_ajax.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-4912 28267 CVE-2007-4912 57002 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004387.html 2007-09-12 2012-09-25 View