CVE-2006-1326
CVE-2006-1326
Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) result_type, (2) search_in, (3) nav, (4) forums, and (5) s parameters in the Search action to index.php; (6) st parameter to index.php with showtopics set to 1; (7) m, (8) y, and (9) d parameters in a calendar action; (10) t parameter in a Print action; (11) MID parameter in a Mail action; (12) HID parameter in a Help action; (13) active parameter in a search action; (14) sort_order, (15) max_results, or (16) sort_key parameter in a Members action.
Affected products
n/a · n/apublic PoCs found — 7
exploitdbwww.exploit-db.com/exploits/27437unverifiedexploitdbwww.exploit-db.com/exploits/27438unverifiedexploitdbwww.exploit-db.com/exploits/27441unverifiedexploitdbwww.exploit-db.com/exploits/27440unverifiedexploitdbwww.exploit-db.com/exploits/27439unverifiedexploitdbwww.exploit-db.com/exploits/27436unverifiedexploitdbwww.exploit-db.com/exploits/27442unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →