Filtered by vendor Invision Power Services Subscriptions
Filtered by product Invision Power Board Subscriptions
Total 42 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2007-3219 1 Invision Power Services 1 Invision Power Board 2025-04-09 N/A
Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's profile data, such as an AIM screen name or Yahoo! identity.
CVE-2007-2963 1 Invision Power Services 1 Invision Power Board 2025-04-09 N/A
Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board (IPB or IP.Board) 2.2.2, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) module_bbcodeloader.php, (2) module_div.php, (3) module_email.php, (4) module_image.php, (5) module_link.php, or (6) the editorid parameter to module_table.php in jscripts/folder_rte_files/. NOTE: some details were obtained from third party sources.