Unscored CVE-2014-5106 EUVD-2014-5004GHSA-5rvc-w625-w5gj

Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.4.x through 3.4.6 allows remote attackers to…

Published Jul 28, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.4.x through 3.4.6 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to admin/install/index.php.

References

ipboard-index-referer-xss(94693) vdb-entry
20140716 IP.Board 3.4 cross-site scripting in Referer header mailing-list
68705 vdb-entry