CVE-2004-0359

Name of the Vulnerable Software and Affected Versions Invision Power Board version 1.3

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to execute arbitrary scripts as other users. This is achieved by manipulating specific parameters in the index.php file, including the c, f, showtopic, showuser, or username parameters.

Recommendations For Invision Power Board version 1.3, as a temporary workaround, consider restricting access to the index.php file until a patch is available. Avoid using the parameters c, f, showtopic, showuser, or username in the index.php file until the issue is resolved.