The host is running Invision Power Board and is prone to Cross-Site Scripting Vulnerability.

Successful exploitation will let attackers execute arbitrary code in the context of the affected web application and can cause various web related attacks by point to malicious IFRAME or HTML data. Impact Level: Application

Solution/Patch not available as on 09th April 2009. Information will be updated once the vendor supplies any updates. For further updates refer, http://www.invisionpower.com

Improper sanitization of user supplied input in the signature data which can cause crafting malicious IFRAME or HTML tags to gain sensitive information about the web application or can cause injection of web pages to the web application.

Invision Power Board version 2.3.1 and prior.

• http://www.securityfocus.com/archive/1/490115
• http://xforce.iss.net/xforce/xfdb/41502

---

Updated on 2015-03-25