CVE-2006-3197

Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a POST that contains hexadecimal-encoded HTML.

Published: Jun 23, 2006
Updated: Apr 13, 2023
CVE: CVE-2006-3197
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
invision_power_services / invision_power_board	2.1_beta2	2.1_beta2.x
invision_power_services / invision_power_board	2.1_rc1	2.1_rc1.x
invision_power_services / invision_power_board	2.1.1	2.1.1.x
invision_power_services / invision_power_board	2.1.6	2.1.6.x
invision_power_services / invision_power_board	2.1_alpha2	2.1_alpha2.x
invision_power_services / invision_power_board	2.1.2	2.1.2.x
invision_power_services / invision_power_board	2.1.3	2.1.3.x
invision_power_services / invision_power_board	2.1_beta5	2.1_beta5.x
invision_power_services / invision_power_board	2.1.0	2.1.0.x
invision_power_services / invision_power_board	2.1.5	2.1.5.x
invision_power_services / invision_power_board	2.1_beta4	2.1_beta4.x
invision_power_services / invision_power_board	2.1	2.1.x
invision_power_services / invision_power_board	2.1_beta3	2.1_beta3.x
invision_power_services / invision_power_board	2.1.4	2.1.4.x

Vulnerability Database

289,697

CVE-2006-3197