Unrated severityNVD Advisory· Published Nov 16, 2005· Updated Apr 16, 2026
CVE-2005-3547
CVE-2005-3547
Description
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) adsess, (2) name, and (3) description parameters in admin.php, and the (4) ACP Notes, (5) Member Name, (6) Password, (7) Email Address, (8) Components, and multiple other input fields.
Affected products
1- cpe:2.3:a:invision_power_services:invision_board:2.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- secunia.com/advisories/17443nvdPatchVendor Advisory
- benji.redkod.org/audits/ipb.2.1.pdfnvd
- osvdb.org/20516nvd
- osvdb.org/20517nvd
- osvdb.org/20518nvd
- osvdb.org/20519nvd
- osvdb.org/20520nvd
- osvdb.org/20521nvd
- osvdb.org/20522nvd
- www.securityfocus.com/archive/1/415801/30/0/threadednvd
- www.securityfocus.com/bid/15344nvd
- www.securityfocus.com/bid/15345nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/22999nvd
News mentions
0No linked articles in our index yet.