VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 28, 2014· Updated Jun 17, 2026

CVE-2014-5106

CVE-2014-5106

Description

Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.4.x through 3.4.6 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to admin/install/index.php.

Affected products

14
  • Invision Power Services/Power Board13 versions
    cpe:2.3:a:invisioncommunity:invision_power_board:3.4.0:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.0:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.0:beta4:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.0:beta5:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:invisioncommunity:invision_power_board:3.4.6:*:*:*:*:*:*:*
  • Invision Power Services/IP.Boardllm-fuzzy
    Range: >=3.4, <=3.4.6

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.