CVE-2005-3547 (GCVE-0-2005-3547)
Vulnerability from cvelistv5
Published
2005-11-16 07:37
Modified
2024-08-07 23:17
Severity ?
CWE
  • n/a
Summary
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields.
References
cve@mitre.org http://benji.redkod.org/audits/ipb.2.1.pdf
cve@mitre.org http://osvdb.org/20516
cve@mitre.org http://osvdb.org/20517
cve@mitre.org http://osvdb.org/20518
cve@mitre.org http://osvdb.org/20519
cve@mitre.org http://osvdb.org/20520
cve@mitre.org http://osvdb.org/20521
cve@mitre.org http://osvdb.org/20522
cve@mitre.org http://secunia.com/advisories/17443 Patch, Vendor Advisory
cve@mitre.org http://www.securityfocus.com/archive/1/415801/30/0/threaded
cve@mitre.org http://www.securityfocus.com/bid/15344
cve@mitre.org http://www.securityfocus.com/bid/15345
cve@mitre.org https://exchange.xforce.ibmcloud.com/vulnerabilities/22999
af854a3a-2127-422b-91ae-364da2661108 http://benji.redkod.org/audits/ipb.2.1.pdf
af854a3a-2127-422b-91ae-364da2661108 http://osvdb.org/20516
af854a3a-2127-422b-91ae-364da2661108 http://osvdb.org/20517
af854a3a-2127-422b-91ae-364da2661108 http://osvdb.org/20518
af854a3a-2127-422b-91ae-364da2661108 http://osvdb.org/20519
af854a3a-2127-422b-91ae-364da2661108 http://osvdb.org/20520
af854a3a-2127-422b-91ae-364da2661108 http://osvdb.org/20521
af854a3a-2127-422b-91ae-364da2661108 http://osvdb.org/20522
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/17443 Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/archive/1/415801/30/0/threaded
af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/bid/15344
af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/bid/15345
af854a3a-2127-422b-91ae-364da2661108 https://exchange.xforce.ibmcloud.com/vulnerabilities/22999
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:17:23.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20051104 Failles dans Invision Power Board 2.1 [xss]",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/415801/30/0/threaded"
          },
          {
            "name": "invision-powerboard-admin-xss(22999)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22999"
          },
          {
            "name": "20520",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20520"
          },
          {
            "name": "20519",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20519"
          },
          {
            "name": "15344",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15344"
          },
          {
            "name": "17443",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17443"
          },
          {
            "name": "20518",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20518"
          },
          {
            "name": "20516",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20516"
          },
          {
            "name": "20517",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20517"
          },
          {
            "name": "15345",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15345"
          },
          {
            "name": "20521",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20521"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://benji.redkod.org/audits/ipb.2.1.pdf"
          },
          {
            "name": "20522",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/20522"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20051104 Failles dans Invision Power Board 2.1 [xss]",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/415801/30/0/threaded"
        },
        {
          "name": "invision-powerboard-admin-xss(22999)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22999"
        },
        {
          "name": "20520",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20520"
        },
        {
          "name": "20519",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20519"
        },
        {
          "name": "15344",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15344"
        },
        {
          "name": "17443",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17443"
        },
        {
          "name": "20518",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20518"
        },
        {
          "name": "20516",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20516"
        },
        {
          "name": "20517",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20517"
        },
        {
          "name": "15345",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15345"
        },
        {
          "name": "20521",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20521"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://benji.redkod.org/audits/ipb.2.1.pdf"
        },
        {
          "name": "20522",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/20522"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3547",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20051104 Failles dans Invision Power Board 2.1 [xss]",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/415801/30/0/threaded"
            },
            {
              "name": "invision-powerboard-admin-xss(22999)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22999"
            },
            {
              "name": "20520",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20520"
            },
            {
              "name": "20519",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20519"
            },
            {
              "name": "15344",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15344"
            },
            {
              "name": "17443",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17443"
            },
            {
              "name": "20518",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20518"
            },
            {
              "name": "20516",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20516"
            },
            {
              "name": "20517",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20517"
            },
            {
              "name": "15345",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15345"
            },
            {
              "name": "20521",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20521"
            },
            {
              "name": "http://benji.redkod.org/audits/ipb.2.1.pdf",
              "refsource": "MISC",
              "url": "http://benji.redkod.org/audits/ipb.2.1.pdf"
            },
            {
              "name": "20522",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/20522"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3547",
    "datePublished": "2005-11-16T07:37:00",
    "dateReserved": "2005-11-16T00:00:00",
    "dateUpdated": "2024-08-07T23:17:23.263Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2005-3547\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2005-11-16T07:42:00.000\",\"lastModified\":\"2025-04-03T01:03:51.193\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Invision Power Board 2.1 permite a atacantes remotos inyectar web scritp o HTML de su elecci\u00f3n mediante los par\u00e1metros (1) adsess, (2) name y (3) description en admin.php, y (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, y otros m\u00faltiples campos de entrada.\\r\\n\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:invision_power_services:invision_board:2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05FA7E1F-D9D2-419F-A9DE-7BE4253F897E\"}]}]}],\"references\":[{\"url\":\"http://benji.redkod.org/audits/ipb.2.1.pdf\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20516\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20517\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20518\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20519\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20520\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20521\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://osvdb.org/20522\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/17443\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/415801/30/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/15344\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/15345\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/22999\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://benji.redkod.org/audits/ipb.2.1.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20516\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20517\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20518\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20519\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20520\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20521\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/20522\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/17443\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/415801/30/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/15344\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/15345\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/22999\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.