CVE-2006-1369

The CVE-2006-1369 issue affects Invision Power Board (IPB) 2.1.5 and earlier, prior to 20060308. The vulnerability is a cross-site scripting (XSS) flaw exploitable through a Private Message (PM) under certain circumstances, enabling remote attackers to inject arbitrary web script or HTML. The roo...