VulnerabilityModified
CVE-2007-3219
Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's profile data, such as an AIM screen name or Yahoo! identity.
HIGH 7.8EPSS 1.65%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.65%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's profile data, such as an AIM screen name or Yahoo! identity.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:C/A:N
- EPSS
- 1.65% probability · 75th percentile
- CISA KEV
- Not listed
- Affected
- invision power services/invision power board
- Source
- cve@mitre.org
References
- http://forums.invisionpower.com/index.php?showtopic=235316
- http://secunia.com/advisories/25637Patch, Vendor Advisory
- http://www.osvdb.org/35436
- http://www.securityfocus.com/bid/24442
- http://www.vupen.com/english/advisories/2007/2160
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34841
- http://forums.invisionpower.com/index.php?showtopic=235316
- http://secunia.com/advisories/25637Patch, Vendor Advisory
- http://www.osvdb.org/35436
- http://www.securityfocus.com/bid/24442
- http://www.vupen.com/english/advisories/2007/2160
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34841
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.