CVE-2005-3547: XSS
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3547?
CVE-2005-3547 is considered a medium to high severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2005-3547?
To fix CVE-2005-3547, update Invision Power Board to a version that is not affected by this XSS vulnerability.
What are the affected parameters in CVE-2005-3547?
CVE-2005-3547 affects the adsess, name, description parameters in admin.php, and various fields such as ACP Notes, Member Name, Password, and Email Address.
Can CVE-2005-3547 lead to unauthorized actions on the site?
Yes, CVE-2005-3547 can allow remote attackers to inject scripts that could perform unauthorized actions on behalf of users.
Is CVE-2005-3547 easy to exploit?
CVE-2005-3547 can be exploited easily if the site does not properly validate user input, making it particularly concerning for vulnerable sites.