Description
Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 before 2008-03-13 allows remote attackers to inject arbitrary web script or HTML via nested BBCodes, a different vector than CVE-2008-0913.
References
- 29378 third-party-advisory
- ADV-2008-0899 vdb-entry
- http://forums.invisionpower.com/index.php?showtopic=270637
- ipb-nested-bbcodes-xss(41209) vdb-entry