CVE-2004-1578: XSS

Published Dec 31, 2004

Updated

Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header.

Affected Software

1 affected component

Invision Power Services Invision Power Board=2.0.0

Event History

Dec 31, 2004

CVE Published

05:00 AM

Feb 20, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1578?

CVE-2004-1578 is considered a medium severity vulnerability due to its potential for exploitation through cross-site scripting.

How do I fix CVE-2004-1578?

To fix CVE-2004-1578, it's recommended to upgrade Invision Power Board to a version that addresses the XSS vulnerability.

What kind of attacks can CVE-2004-1578 facilitate?

CVE-2004-1578 can facilitate attacks that allow remote attackers to execute arbitrary web scripts or HTML on affected sites.

Which version of Invision Power Board is affected by CVE-2004-1578?

CVE-2004-1578 specifically affects Invision Power Board version 2.0.0.

How does CVE-2004-1578 exploit the HTTP Referer field?

CVE-2004-1578 exploits the HTTP Referer field by allowing unvalidated input, leading to execution of arbitrary scripts.