# Exploit Title: IP Board - Persistent Cross Site Scripting Vulnerability
# Date: December 2012
# Exploit Author: Wuming tgh
# Vendor Homepage: https://www.invisionpower.com
# Software Link: https://www.invisionpower.com
# Version: Affecting all versions below 3.4.2 (Fixed)
# Tested on: Linux,Windows 7

http://i.imgur.com/QzD0KhGl.png
http://i.imgur.com/WEOxuixl.png

1) Go to My Settings to edit user's profile
localhost/index.php?app=core&module=usercp&tab=core
2) Find the "Profile Infomation" input field. (textarea)
3) XSS Vector:
</textarea><script> your script </script>
4) There are 2 pages that the javascript will be executed. One is the current user's profile. (will only show when you click "edit profile")
Another one is in the admin panel. When an admin views your profile via admin panel the javascript will also be executed.

Simple Scenario:
You might think that it is pretty hard to steal cookies or do anything with it since someone will need to view your profile. However, its pretty simple. Create an account. Start spamming the forum or do something against the rules. The admin will want to ban you. Hence, he views your profile. Done.