Invision Power Board BBCode HTML Injection Vulnerability

Bugtraq ID:	40139
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 08 2010 12:00AM
Updated:	Mar 08 2010 12:00AM
Credit:	The vendor.
Vulnerable:	Invision Power Services Invision Power Board 3.0.5 Invision Power Services Invision Power Board 2.3.6
Not Vulnerable:

Invision Power Board BBCode HTML Injection Vulnerability

Invision Power Board is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

Invision Power Board 2.3.6 and 3.0.5 are vulnerable; other versions may also be affected.

Invision Power Board BBCode HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

Invision Power Board BBCode HTML Injection Vulnerability

Solution:
The vendor has released patches. Please see the references for more information.

Invision Power Board BBCode HTML Injection Vulnerability

References:

• Invision Board Homepage (Invision Power Services)
  
• IP.Board 2.3.6 and 3.0.5 Security Update (Invision Power Services)