CVE-2006-7064

Published Feb 24, 2007

Last updated 7 years ago

Overview

Description
Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML as the administrator via the phpinfo parameter.
Source
cve@mitre.org
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
9.3
Impact score
10
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
NVD-CWE-Other

Social media

Hype score
Not currently trending

Evaluator

Comment
-
Impact
Given complete CIA triad impact because remote attackers can inject arbitrary web script or HTML as the administrator.
Solution
Given complete CIA triad impact because remote attackers can inject arbitrary web script or HTML as the administrator.

Configurations