Invision Power Board profil-opdatering sikkerhedsproblem - Advisories

Invision Power Board profil-opdatering sikkerhedsproblem

Secunia Advisory:	SA25637
Udsendt:	2007-06-12
Sidste Opdt.:	2007-06-15

Kritisk:	Mindre kritisk
Betydning:	Manipulation af data
Hvor:	Fra Internet
Løsning Status:	Producent Patch

Software:	Invision Power Board 2.x

CVE reference:	CVE-2007-3219 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Beskrivelse: Der er rapporteret et sikkerhedsproblem i Invision Power Board, som kan udnyttes af ondsindede brugere til at manipulere bestemte data. Problemet skyldes en fejl i sources/action_public/xmlout.php og kan f.eks. udnyttes til at ændre en anden brugers AIM eller Yahoo! identitet. Sikkerhedsproblemet er rapporteret i Invision Power Board version 2.2.0 til og med 2.2.2. Løsning: Opdatér til version 2.3.0. Installér rettelse. http://forums.invisionpower.com/index.php?showtopic=235316 Rapporteret af / Kredit: Producenten krediterer "iMMENSE". Forløb: 14-06-2007: Opdaterede løsningen. 15-06-2007: Tilføjede CVE-reference. Original Advisory: http://forums.invisionpower.com/index.php?showtopic=235316 http://forums.invisionpower.com/index...mp;bug_title_id=5667&bug_cat_id=3



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

22 Relaterede Secunia Advisories, displaying 10

Send Feedback to Secunia

Hvis du har ny information angående dette Secunia advisory eller et produkt i vores database, så send det venligst til os. Du kan sende det til os enten ved at bruge vores web formular eller ved at sende det til vuln@secunia.com. Ideer, foreslag og andet feedback er også meget velkommen.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	phpJobScheduler "installed_conf ig_file" File Inclusion Vulnerabilities

2.	Subdreamer Light Global Variables SQL Injection Vulnerability

3.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

4.	dotProject SQL Injection and Cross-Site Scripting

5.	Caudium "configvar" Insecure Temporary Files

6.	Slackware update for amarok

7.	Adium MSN SLP Message Integer Overflow Vulnerabilities

8.	Blogn Cross-Site Scripting and Cross-Site Request Forgery

9.	Novell eDirectory Multiple Vulnerabilities

10.	Sun Solaris Kernel Covert Channel Security Bypass