CVE-2014-5106

Published: Jul 28, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.4.x through 3.4.6 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to admin/install/index.php.

Affected (13)

Products: Invisioncommunity: Invision Power Board

Invisioncommunity

1 product

Invision Power Board

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Invisioncommunity Invision Power Board	Version 3.4.0
Invisioncommunity Invision Power Board	Version 3.4.0 alpha1
Invisioncommunity Invision Power Board	Version 3.4.0 beta1
Invisioncommunity Invision Power Board	Version 3.4.0 beta2
Invisioncommunity Invision Power Board	Version 3.4.0 beta3
Invisioncommunity Invision Power Board	Version 3.4.0 beta4
Invisioncommunity Invision Power Board	Version 3.4.0 beta5
Invisioncommunity Invision Power Board	Version 3.4.1
Invisioncommunity Invision Power Board	Version 3.4.2
Invisioncommunity Invision Power Board	Version 3.4.3
Invisioncommunity Invision Power Board	Version 3.4.4
Invisioncommunity Invision Power Board	Version 3.4.5
Invisioncommunity Invision Power Board	Version 3.4.6