vendor:
Invision Power Board
by:
SecurityFocus
7.5
CVSS
HIGH
Unauthorized Access
287
CWE
Product Name: Invision Power Board
Affected Version From: 1
Affected Version To: 1.3 Final
Patch Exists: YES
Related CWE: N/A
CPE: a:invision_power_services:invision_power_board
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2005
Invision Power Board Unauthorized Access Vulnerability
Reportedly, a moderator can edit forum posts owned by other moderators through an HTTP GET request without providing sufficient authentication credentials.
Mitigation:
Ensure that authentication credentials are provided when editing forum posts.