Description
Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header.
References
- 12740 third-party-advisory
- invision-referer-header-xss(17604) vdb-entry
- 11332 vdb-entry
- 20041005 [MAXPATROL Security Advisories] Cross site scripting in Invision Power Board mailing-list