CVE-2006-3197

Invision Power Board (IPB) 2.1.6 and earlier contains a Cross-site scripting (XSS) vulnerability. A POST request carrying hexadecimal-encoded HTML can allow an attacker to inject arbitrary web script/HTML. The affected component is the IPB posting handler (as described in the CVE). The available ...