CVE-2006-7064: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forum/admin.php for Invision Power Board IPB 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML as the administrator via the phpinfo parameter...