CVE-2019-8278

Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.

• CWE-79

• http://www.securityfocus.com/bid/107258Third Party Advisory, VDB Entry
• https://scriptinjection.blogspot.com/2019/02/invision-power-board-331-348-stored-xss.htmlExploit, Third Party Advisory
• http://www.securityfocus.com/bid/107258Third Party Advisory, VDB Entry
• https://scriptinjection.blogspot.com/2019/02/invision-power-board-331-348-stored-xss.htmlExploit, Third Party Advisory

Published

Mar 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-8272UltraVNC revision 1211 has multiple off-by-one vulnerabiliti…9.8
• CVE-2019-8273UltraVNC revision 1211 has a heap buffer overflow vulnerabil…9.8
• CVE-2019-8274UltraVNC revision 1211 has a heap buffer overflow vulnerabil…9.8
• CVE-2019-8275UltraVNC revision 1211 has multiple improper null terminatio…9.8
• CVE-2019-8276UltraVNC revision 1211 has a stack buffer overflow vulnerabi…7.5
• CVE-2019-8277UltraVNC revision 1211 contains multiple memory leaks (CWE-6…7.5
• CVE-2019-8279Multiple stored XSS in Vanilla Forums before 2.5 allow remot…
• CVE-2019-8280UltraVNC revision 1203 has out-of-bounds access vulnerabilit…
• CVE-2019-8282Gemalto Admin Control Center, all versions prior to 7.92, us…5.3
• CVE-2019-8283Hasplm cookie in Gemalto Admin Control Center, all versions …6.5
• CVE-2019-8285Kaspersky Lab Antivirus Engine version before 04.apr.2019 ha…
• CVE-2019-8286Information Disclosure in Kaspersky Anti-Virus, Kaspersky In…