Unscored CVE-2006-7064 EUVD-2006-7046GHSA-cwcq-gq82-576q

Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inj…

Published Feb 24, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML as the administrator via the phpinfo parameter.

References

20060609 Invision Power Board XSS mailing-list
18450 vdb-entry
2307 third-party-advisory
ipb-admin-phpinfo-xss(27069) vdb-entry