CVE-2004-0359

Cross-site scripting XSS vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the 1 c, 2 f, 3 showtopic, 4 showuser, or 5 username parameters...

CVE-2004-0359

CVE-2004-0359 is an XSS vulnerability in the Invision Power Board 1.3 final, triggered by unvalidated input in index.php via the parameters (c, f, showtopic, showuser, username). The underlying cause is unsanitized user-supplied values leading to script execution in other users’ sessions. The NVD...