ID de Prueba:	1.3.6.1.4.1.25623.1.0.56864
Categoría:	CGI abuses
Título:	Invision Power Board < 2.1.5.2006.04.25 Multiple Vulnerabilities
Resumen:	NOSUMMARY
Descripción:	Description: The remote version of Invision Power Board, according to its version number, is vulnerable to a multiple cross site scripting and SQL injection vulnerabilites. Versions prior to 2.1.5.2006.04.25 are known to be vulnerable. Solution : Upgrade to a newer version. Risk factor : High CVSS Score: 6.4
Referencia Cruzada:	BugTraq ID: 17690 BugTraq ID: 17695 Common Vulnerability Exposure (CVE) ID: CVE-2006-2059 http://www.securityfocus.com/bid/17695 Bugtraq: 20060425 Invision Vulnerabilities, including remote code execution (Google Search) http://www.securityfocus.com/archive/1/431990/100/0/threaded Bugtraq: 20060427 Invision Power Board 2.1.5 POC (Google Search) http://www.securityfocus.com/archive/1/432451/100/0/threaded Bugtraq: 20060427 Re: Invision Vulnerabilities, including remote code execution (Google Search) http://www.securityfocus.com/archive/1/432226/100/0/threaded Bugtraq: 20060710 Re: RE: Invision Vulnerabilities, including remote code execution (Google Search) http://www.securityfocus.com/archive/1/439607/100/0/threaded http://www.osvdb.org/25005 http://secunia.com/advisories/19830 http://securityreason.com/securityalert/796 http://www.vupen.com/english/advisories/2006/1534 XForce ISS Database: invision-search-file-include(26070) https://exchange.xforce.ibmcloud.com/vulnerabilities/26070 Common Vulnerability Exposure (CVE) ID: CVE-2006-2060 http://www.osvdb.org/25008 XForce ISS Database: invision-admin-file-include(26072) https://exchange.xforce.ibmcloud.com/vulnerabilities/26072 Common Vulnerability Exposure (CVE) ID: CVE-2006-2061 http://www.securityfocus.com/bid/17690 XForce ISS Database: invision-index-ck-sql-injection(26071) https://exchange.xforce.ibmcloud.com/vulnerabilities/26071
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.