Invision Power Board BBCode Handling Unspecified HTML Injection Vulnerability

Bugtraq ID:	27920
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 20 2008 12:00AM
Updated:	Feb 21 2008 10:03PM
Credit:	The vendor reported this vulnerability.
Vulnerable:	Invision Power Services Invision Power Board 2.3.4
Not Vulnerable:

Invision Power Board BBCode Handling Unspecified HTML Injection Vulnerability

Invision Power Board (IP.Board) is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected website, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

This issue affects IP.Board 2.3.4 released prior to February 20, 2008.

Invision Power Board BBCode Handling Unspecified HTML Injection Vulnerability

Attackers may exploit this issue through a browser.

Invision Power Board BBCode Handling Unspecified HTML Injection Vulnerability

Solution:
The vendor has released a fix to address this issue. Please see the references for more information.


Invision Power Services Invision Power Board 2.3.4

• Invision Power Services patch80220.zip
  http://forums.invisionpower.com/index.php?s=c12d8c8775ab4618800caea5b8 381f48&act=attach&type=post&id=16288

Invision Power Board BBCode Handling Unspecified HTML Injection Vulnerability

References:

• Invision Power Board Home Page (Invision Power Services)
  
• IP.Board 2.3.4 Security Enhancements (Invision Power Services)