EDB-25267

functional

Invision Power Board 1.x/2.0 - HTML Injection

view exploit source exploit_dbverifiedtype webappsauthor Woody Hughespublished 2005-03-23catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2005-0886US	medium4.3	1.31% (71st)	Exploit	2005-05-02
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.