Invision Power Board '.txt' File MIME-Type Cross Site Scripting Vulnerability

Bugtraq ID:	37263
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 09 2009 12:00AM
Updated:	Dec 15 2009 08:43PM
Credit:	Xacker
Vulnerable:	Invision Power Services Invision Power Board 3.0.3 Invision Power Services Invision Power Board 3.0.2 Invision Power Services Invision Power Board 3.0 b5 Invision Power Services Invision Power Board 2.3.6 Invision Power Services Invision Power Board 2.3.5 Invision Power Services Invision Power Board 2.3.4 Invision Power Services Invision Power Board 2.3.1 Invision Power Services Invision Power Board 2.2.2 Invision Power Services Invision Power Board 2.2.1 Invision Power Services Invision Power Board 2.2 Invision Power Services Invision Power Board 2.1.6 Invision Power Services Invision Power Board 3.0.4 Invision Power Services Invision Power Board 2.1.5.2006.04.25 Invision Power Services Invision Power Board 2.1.5.2006.03.08 Invision Power Services Invision Gallery 2.1 Invision Power Services Invision Gallery 2.0.7 Invision Power Services Invision Gallery 2.0.6 Invision Power Services Invision Gallery 2.0.3 Invision Power Services Invision Gallery 1.3.1 Invision Power Services Invision Gallery 1.3 Invision Power Services Invision Gallery 1.0.1 Invision Power Services Invision Community Blog 1.2.4 Invision Power Services Invision Community Blog 1.2.3 Invision Power Services Invision Community Blog 1.1.2 Final Invision Power Services Invision Community Blog 1.1 Invision Power Services Invision Community Blog 1.0 Invision Power Services Invision Community Blog 1.2 Invision Power Services Invision Board 2.1.7 + Invision Power Services Invision Board 2.1 Invision Power Services Invision Board 2.1.7 Invision Power Services Invision Board 2.1.6 + Invision Power Services Invision Board 2.1 Invision Power Services Invision Board 2.1.5 + Invision Power Services Invision Board 2.1 Invision Power Services Invision Board 2.1.4 Invision Power Services Invision Board 2.1.3 Invision Power Services Invision Board 2.1 Alpha2 Invision Power Services Invision Board 2.1 + Invision Power Services Invision Board 2.1 Invision Power Services Invision Board 2.0.4 Invision Power Services Invision Board 2.0.3 Invision Power Services Invision Board 2.0.2 Invision Power Services Invision Board 2.0.1 Invision Power Services Invision Board 2.0 PF2 Invision Power Services Invision Board 2.0 PF1 Invision Power Services Invision Board 2.0 PDR3 Invision Power Services Invision Board 2.0 Alpha 3 Invision Power Services Invision Board 2.0 Invision Power Services Invision Board 2.1.7 21013.60810.s + Invision Power Services Invision Board 2.1 Invision Power Services Invision Board 2.1.6 2006-06-19 + Invision Power Services Invision Board 2.1
Not Vulnerable:	Invision Power Services Invision Power Board 3.0.5

Invision Power Board '.txt' File MIME-Type Cross Site Scripting Vulnerability

Invision Power Board is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Invision Power Board 2.0 through 3.0.4 are vulnerable. Other versions may also be affected.

Invision Power Board '.txt' File MIME-Type Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting victim to view a malicious text file.

The following example text file is available:

• /data/vulnerabilities/exploits/37263.txt

Invision Power Board '.txt' File MIME-Type Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references for details.

Invision Power Board '.txt' File MIME-Type Cross Site Scripting Vulnerability

References:

• Invision Power Board 3.0.5 Released (Invision Power Services)
  
• Invision Power Board Homepage (Invision Power Services )