CVE-2009-5159: XSS
Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID for this security issue is CVE-2009-5159.
What is the affected software for this vulnerability?
The affected software for this vulnerability is Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4 when Internet Explorer 5 is used.
What is the severity of CVE-2009-5159?
The severity of CVE-2009-5159 is medium with a CVSS score of 6.1.
How does this vulnerability exploit XSS?
This vulnerability exploits XSS through a .txt attachment when using Internet Explorer 5.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: [https://www.securityfocus.com/bid/37263/info](https://www.securityfocus.com/bid/37263/info), [https://www.exploit-db.com/exploits/33394](https://www.exploit-db.com/exploits/33394), [https://packetstormsecurity.com/files/83624/Invision-Power-Board-3.0.4-Cross-Site-Scripting.html](https://packetstormsecurity.com/files/83624/Invision-Power-Board-3.0.4-Cross-Site-Scripting.html).