CVE:CVE-2004-2279
CNNVD:CNNVD-200412-492
Invision Power Board 1.3 最终版存在跨站脚本（XSS)漏洞。远程攻击者像其他用户一样借助index.php中聊天行为的pop参数执行任意脚本。
solution:Upgrade invision_power_services invision_power_board to a higher version than 1.3_final,and avoid the version 1.3_final