CVE-2006-1326

This exploit demonstrates multiple XSS vulnerabilities in Invision Power Board due to insufficient input sanitization in the 'sort_key', 'sort_order', and 'max_results' parameters. The PoC uses script injection to execute arbitrary JavaScript in the context of the affected site.

This exploit demonstrates multiple XSS vulnerabilities in Invision Power Board by injecting arbitrary script code via unsanitized input parameters in the search functionality. The PoC URLs trigger JavaScript execution in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Invision Power Board by injecting a script tag into the URL parameters, which executes arbitrary JavaScript in the context of the affected site.

This exploit demonstrates a reflected XSS vulnerability in Invision Power Board due to improper input sanitization. The PoC URL injects a script tag to execute arbitrary JavaScript in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Invision Power Board by injecting a script tag into the 'HID' parameter of the Help page. The PoC uses a simple alert to display the user's cookies, proving arbitrary script execution.

This exploit demonstrates multiple XSS vulnerabilities in Invision Power Board by injecting arbitrary JavaScript code via unsanitized input parameters in the calendar functionality.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Invision Power Board due to insufficient input sanitization. The PoC URL injects arbitrary JavaScript code to execute in the context of the affected site.