CVE-2009-5159

Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment.

• CWE-79

• http://community.invisionpower.com/topic/300051-invision-power-board-305-released/Broken Link, Vendor Advisory
• https://packetstormsecurity.com/files/83624/Invision-Power-Board-3.0.4-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/33394Exploit, Third Party Advisory, VDB Entry
• https://www.securityfocus.com/bid/37263/infoThird Party Advisory, VDB Entry
• http://community.invisionpower.com/topic/300051-invision-power-board-305-released/Broken Link, Vendor Advisory
• https://packetstormsecurity.com/files/83624/Invision-Power-Board-3.0.4-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/33394Exploit, Third Party Advisory, VDB Entry
• https://www.securityfocus.com/bid/37263/infoThird Party Advisory, VDB Entry

Published

Mar 13, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-5153In Novell NetWare before 6.5 SP8, a stack buffer overflow in…
• CVE-2009-5154An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.…
• CVE-2009-5155In the GNU C Library (aka glibc or libc6) before 2.28, parse…
• CVE-2009-5156An issue was discovered on ASMAX AR-804gu 66.34.1 devices. T…
• CVE-2009-5157On Linksys WAG54G2 1.00.10 devices, there is authenticated c…
• CVE-2009-5158The google-analyticator plugin before 5.2.1 for WordPress ha…