← Database

CVE-2004-1578

MEDIUM CVSS: 4.3 Published: 2004-12-31 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header.

Affected Platforms

Invision Power Services Invision Power Board

Weakness Type

NVD-CWE-Other

References