CVE:CVE-2004-1578
CNNVD:CNNVD-200412-694
Invision Power Board 2.0.0版本的index.php存在跨站脚本(XSS)漏洞。远程攻击者借助HTTP头中的字段执行任意web脚本或者HTML。
solution:Upgrade invision_power_services invision_power_board to a higher version than 2.0.0,and avoid the version 2.0.0