Unscored CVE-2004-2279 EUVD-2004-2271GHSA-96ph-wr23-vjj2

Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other use…

Published Jul 19, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other users via the pop parameter in a chat action to index.php.

References

invision-indexphp-xss(15448) vdb-entry
20040308 Invision Power Board v1.3 Final Cross Site Scripting 2 - Addon mailing-list