Invision Power Board Admin.PHP Cross-site Scripting Vulnerability

Invision Power Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may use this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie credentials; other attacks are also possible.


 

Privacy Statement
Copyright 2010, SecurityFocus