CVE Database
/

CVE-2006-7064

Back to search

CVE-2006-7064

Published: Feb 24, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML as the administrator via the phpinfo parameter.

VendorProductVersions

n/a

n/a

affected
n/a

References

20060609 Invision Power Board XSS
mailing-list
x_refsource_BUGTRAQ
18450
vdb-entry
x_refsource_BID
2307
third-party-advisory
x_refsource_SREASON
ipb-admin-phpinfo-xss(27069)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now