CVE-2014-3149 in IP.Board

Summary

Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.3.x and 3.4.x through 3.4.6, as downloaded before 20140424, or IP.Nexus 1.5.x through 1.5.9, as downloaded before 20140424, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

05/02/2014

Disclosure

07/03/2014

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
66985	Invision Power Services IP.Board cross site scripting	79	Unproven	Official fix	CVE-2014-3149
66984	Invision Power Services IP.Board cross site scripting	79	High	Official fix	CVE-2014-3149

Sources

• MITRE
• NVD
• CVE Details