Vulnerability in Invision Power Services Board

CVE-2004-0359

Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the (1) c, (2) f, (3) showtopic, (4) showuser, or (5) username parameters.

EPSS: 0.056 (92.1th percentile) — read the EPSS interpretation.

Affected products

Invision_power_services Invision_board — versions 1.3.1_final, 1.3_final
N/a — versions n/a

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)