{
    "id": "CVE-2006-1326",
    "published": "2006-03-21 01:06:00",
    "last_modified": "2026-06-16 22:22:26",
    "cvss_score": "4.3",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "cwe": null,
    "description": "Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) result_type, (2) search_in, (3) nav, (4) forums, and (5) s parameters in the Search action to index.php; (6) st parameter to index.php with showtopics set to 1; (7) m, (8) y, and (9) d parameters in a calendar action; (10) t parameter in a Print action; (11) MID parameter in a Mail action; (12) HID parameter in a Help action; (13) active parameter in a search action; (14) sort_order, (15) max_results, or (16) sort_key parameter in a Members action.",
    "epss_score": "0.02437",
    "epss_percentile": "0.83785",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-07 18:17:04",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "invision_power_services",
            "product": "invision_power_board"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "27436",
            "title": "Invision Power Board (IP.Board) 2.0.4 - Search Action Multiple Cross-Site Scripting Vulnerabilities",
            "date": "2006-03-17",
            "url": "https://www.exploit-db.com/exploits/27436"
        },
        {
            "source": "exploit-db",
            "ref_id": "27437",
            "title": "Invision Power Board (IP.Board) 2.0.4 - 'index.php?st' Cross-Site Scripting",
            "date": "2006-03-17",
            "url": "https://www.exploit-db.com/exploits/27437"
        },
        {
            "source": "exploit-db",
            "ref_id": "27438",
            "title": "Invision Power Board (IP.Board) 2.0.4 - Calendar Action Multiple Cross-Site Scripting Vulnerabilities",
            "date": "2006-03-17",
            "url": "https://www.exploit-db.com/exploits/27438"
        },
        {
            "source": "exploit-db",
            "ref_id": "27439",
            "title": "Invision Power Board (IP.Board) 2.0.4 - Print Action 't' Cross-Site Scripting",
            "date": "2006-03-17",
            "url": "https://www.exploit-db.com/exploits/27439"
        },
        {
            "source": "exploit-db",
            "ref_id": "27440",
            "title": "Invision Power Board (IP.Board) 2.0.4 - Mail Action 'MID' Cross-Site Scripting",
            "date": "2006-03-17",
            "url": "https://www.exploit-db.com/exploits/27440"
        },
        {
            "source": "exploit-db",
            "ref_id": "27441",
            "title": "Invision Power Board (IP.Board) 2.0.4 - Help Action 'HID' Cross-Site Scripting",
            "date": "2006-03-17",
            "url": "https://www.exploit-db.com/exploits/27441"
        },
        {
            "source": "exploit-db",
            "ref_id": "27442",
            "title": "Invision Power Services Invision Board 2.0.4 - Members Action Multiple Cross-Site Scripting Vulnerabilities",
            "date": "2006-03-17",
            "url": "https://www.exploit-db.com/exploits/27442"
        }
    ],
    "refs_list": [
        "http://www.osvdb.org/25009",
        "http://www.osvdb.org/25010",
        "http://www.osvdb.org/25011",
        "http://www.osvdb.org/25012",
        "http://www.osvdb.org/25013",
        "http://www.osvdb.org/25014",
        "http://www.osvdb.org/25015",
        "http://www.securityfocus.com/archive/1/428015/100/0/threaded",
        "http://www.securityfocus.com/bid/17144",
        "http://www.osvdb.org/25009",
        "http://www.osvdb.org/25010",
        "http://www.osvdb.org/25011",
        "http://www.osvdb.org/25012",
        "http://www.osvdb.org/25013",
        "http://www.osvdb.org/25014",
        "http://www.osvdb.org/25015",
        "http://www.securityfocus.com/archive/1/428015/100/0/threaded",
        "http://www.securityfocus.com/bid/17144"
    ]
}