CVE-2010-3424

Cross-site scripting (XSS) vulnerability in admin/sources/classes/bbcode/custom/defaults.php in Invision Power Board (IP.Board) 3.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://community.invisionpower.com/topic/320838-ipboard-31x-security-patch-released/Patch, Vendor Advisory
• http://secunia.com/advisories/41314Vendor Advisory
• http://www.securityfocus.com/bid/43053Patch
• http://www.vupen.com/english/advisories/2010/2328Patch, Vendor Advisory
• http://community.invisionpower.com/topic/320838-ipboard-31x-security-patch-released/Patch, Vendor Advisory
• http://secunia.com/advisories/41314Vendor Advisory
• http://www.securityfocus.com/bid/43053Patch
• http://www.vupen.com/english/advisories/2010/2328Patch, Vendor Advisory

Published

Sep 16, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3418Multiple cross-site scripting (XSS) vulnerabilities in NetAr…
• CVE-2010-3419Multiple PHP remote file inclusion vulnerabilities in Hauden…
• CVE-2010-3420Cross-site scripting (XSS) vulnerability in Products_Results…
• CVE-2010-3421Cross-site scripting (XSS) vulnerability in AffiliateLogin.a…
• CVE-2010-3422SQL injection vulnerability in the JGen (com_jgen) component…
• CVE-2010-3423SQL injection vulnerability in the Yr Weatherdata module for…
• CVE-2010-3425Cross-site scripting (XSS) vulnerability in UserControls/Pop…
• CVE-2010-3426Directory traversal vulnerability in jphone.php in the JPhon…
• CVE-2010-3427Multiple cross-site scripting (XSS) vulnerabilities in Open …
• CVE-2010-3428SQL injection vulnerability in modules/notes/json.php in Int…
• CVE-2010-3429flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used…
• CVE-2010-3430The privilege-dropping implementation in the (1) pam_env and…