CVE Vulnerabilities

CVE-2004-0359

Published: Nov 23, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the (1) c, (2) f, (3) showtopic, (4) showuser, or (5) username parameters.

Affected Software

Name Vendor Start Version End Version
Invision_board Invision_power_services 1.3.1_final 1.3.1_final
Invision_board Invision_power_services 1.3_final 1.3_final

References