IP.Board and IP.Gallery Module Multiple Unspecified

by Carol~ Moderator - 4/13/12 11:36 AM

In Reply to: VULNERABILITIES / FIXES - April 13, 2012 by Carol~ Moderator

IP.Board and IP.Gallery Module Multiple Unspecified Vulnerabilities

Release Date : 2012-04-13

Criticality level : Moderately critical
Impact : Unknown
Where : From remote
Solution Status : Vendor Patch

Software: IP.Board (Invision Power Board) 3.x
IP.Gallery (module for IP.Board) 4.x

Description:
Multiple vulnerabilities with unknown impacts have been reported in IP.Board and the IP.Gallery module for IP.Board.

The vulnerabilities are caused due to unspecified errors. No further information is currently available.

The vulnerabilities are reported in IP.Board versions 3.2.0, 3.2.1, 3.2.2, 3.2.3, and 3.3.0 and IP.Gallery versions 4.2.0 and 4.2.1.

Solution:
Apply update.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://community.invisionpower.com/topic/360518-ipboard-331-ipblog-252-ipseo-152-and-updates-for-ipboard-32x-ipgallery-42x-released/

http://secunia.com/advisories/48808/