Invision Power Board IP.Board Information Disclosure Vulnerability

Bugtraq ID:	44553
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 29 2010 12:00AM
Updated:	Oct 29 2010 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Invision Power Services Invision Power Board 3.1.3 Invision Power Services Invision Power Board 3.1.2 Invision Power Services Invision Power Board 3.0.5 Invision Power Services Invision Power Board 3.0.3 Invision Power Services Invision Power Board 3.0.2 Invision Power Services Invision Power Board 3.0.1 Invision Power Services Invision Power Board 3.0 b5 Invision Power Services Invision Power Board 3.0 Invision Power Services Invision Power Board 3.0.4
Not Vulnerable:

Invision Power Board IP.Board Information Disclosure Vulnerability

IP.Board is a community forum implemented in PHP.

Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.

IP.Board 3.1.3 is vulnerable; other versions may be affected.

Invision Power Board IP.Board Information Disclosure Vulnerability

Attackers can exploit this issue using a browser.

Invision Power Board IP.Board Information Disclosure Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Invision Power Board IP.Board Information Disclosure Vulnerability

References:

• IP.Board Homepage (Invision Power Services)
  
• IP.Board 3.0.x / 3.1.x Security Patch Released (Invision Power Services)