| Package | Affected versions | Patched versions |
|---|---|---|
| invision power board | = 1.0= 1.0.1= 1.0.3= 1.1.1= 1.1.2= 1.2= 1.3= 1.3.1_final= 1.3_final= 2.0= 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.x= 2.0_alpha3= 2.0_pdr3= 2.0_pf1= 2.0_pf2= 2.1= 2.1.0= 2.1.1= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.5_2006-03-08= 2.1.6= 2.1_alpha2= 2.1_beta2= 2.1_beta3= 2.1_beta4= 2.1_beta5= 2.1_rc1≤ 2.1.7 |
Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the Admin control panel.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free