← Vulnerability feed

Vulnerability record · CVE-2004-0359 · published 23 November 2004

CVE-2004-0359: Invision power services invision board vulnerability

IInvision Power Services · Invision Board

Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the (1) c, (2) f, (3) showtopic, (4) showuser, or (5) username parameters.

6.8 CVSS 2.0 Medium EPSS 5.6% · top 7.3%
6.8CVSS 2.0 base score
5.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the (1) c, (2) f, (3) showtopic, (4) showuser, or (5) username parameters.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=107851589701916&w=2
http://secunia.com/advisories/11053 ExploitVendor Advisory
http://www.osvdb.org/4154
http://www.securityfocus.com/bid/9768 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15403
http://marc.info/?l=bugtraq&m=107851589701916&w=2
http://secunia.com/advisories/11053 ExploitVendor Advisory
http://www.osvdb.org/4154
http://www.securityfocus.com/bid/9768 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15403

Track CVE-2004-0359 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0338Invision power services invision board vulnerabilitySQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter.EPSS 2.4%7.5CVE-2006-3544Invision power services invision board vulnerabilityMultiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE …EPSS 1.4%7.5CVE-2005-1598Invision power services invision board vulnerabilitySQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted c…EPSS 14%7.5CVE-2005-1070Invision power services invision board vulnerabilitySQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands vi…EPSS 1.1%7.5CVE-2004-1531Invision power services invision board vulnerabilitySQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands v…EPSS 1.3%7.5CVE-2004-1785Invision power services invision board vulnerabilitySQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m paramete…EPSS 1.4%6.5CVE-2005-3549Invision power services invision board vulnerabilityDirect code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to execute arbitrary code by refere…EPSS 1.9%5.0CVE-2006-2061Invision power services invision board vulnerabilitySQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to exec…EPSS 1.6%

Source: NIST National Vulnerability Database (record CVE-2004-0359), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.