Invision Power Services IP.Board 3.3.4/3.4.6 Search cross site scripting

Summaryinfo

A vulnerability was found in Invision Power Services IP.Board 3.3.4/3.4.6. It has been rated as problematic. This impacts an unknown function of the component Search. This manipulation causes cross site scripting. Remote exploitation of the attack is possible. Furthermore, an exploit is available. To fix this issue, it is recommended to deploy a patch.

Detailsinfo

A vulnerability has been found in Invision Power Services IP.Board 3.3.4/3.4.6 (Forum Software) and classified as problematic. Affected by this vulnerability is an unknown function of the component Search. The manipulation with an unknown input leads to a cross site scripting vulnerability. The CWE definition for the vulnerability is CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. As an impact it is known to affect confidentiality, integrity, and availability.

The weakness was published 12/13/2013 by Artur Czy? as IP.Board 3.3.x, 3.4.x Security Update as confirmed posting (Forum). It is possible to read the advisory at community.invisionpower.com. The public release has been coordinated with Invision Power Services. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details are unknown but a private exploit is available. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

It is declared as proof-of-concept.

Upgrading to version 3.4.6 [2013-12-13] eliminates this vulnerability. Applying the patch ipb33_patch_dec_13.zip/ipb34_patch_dec_13.zip is able to eliminate this problem. The bugfix is ready for download at community.invisionpower.com. The best possible mitigation is suggested to be patching the affected component. A possible mitigation has been published immediately after the disclosure of the vulnerability. The posting contains the following remark:

If you are an IPS Community in the Cloud customer running IP.Board 3.3 or above, no further action is necessary; we have already automatically patched your account. If you are using a version older than IP.Board 3.3, you should contact support to upgrade. If you have installed or upgraded to IP.Board 3.4.6 today, no further action is necessary; we have already updated the main download zips.

The vulnerability is also documented in the databases at OSVDB (101029†) and Secunia (SA56128†). Similar entries are available at VDB-11514 and VDB-12604. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Forum Software

Vendor

• Invision Power Services

Name

• IP.Board

Version

• 3.3.4
• 3.4.6

License

• commercial

Website

• Vendor: https://invisioncommunity.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion